Alureon & Crypt.VNS

AVG detected Alureon & quarantined file, which I deleted. Soon thereafter it detected two objects, only one of which it could "remove". A Windows Live OneCare scan detected the same two objects, only one of which it could "remove". WinPatrol subsequently detected akebook.ini, ak3ebook.ini & ivi.reg, along with 8 logfiles, all hidden. I deleted them upon rebooting--took 11 reboots. In the meanwhile, AVG twice detected CRYPT VNS, which I quarantined and deleted. But now I can't open or link to various sites, including orbitz.com, with Firefox, Chrome or IE Explorer. Also my system seems very slow. Here are my logs:

OTL Extras logfile created on: 5/19/2010 7:35:04 PM - Run 1
OTL by OldTimer - Version 3.2.5.0 Folder = C:\Documents and Settings\William\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 65.00% Memory free
3.00 Gb Paging File | 2.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): C:\pagefile.sys 1000 1000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 292.28 Gb Total Space | 212.12 Gb Free Space | 72.57% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: BILL
Current User Name: William
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\AVG\AVG9\avgemc.exe" = C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG9\avgupd.exe" = C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG9\avgnsx.exe" = C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"C:\WINDOWS\system32\mmc.exe" = C:\WINDOWS\system32\mmc.exe:*:Disabled:Microsoft Management Console -- (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{075473F5-846A-448B-BCB3-104AA1760205}" = RecordNow Data
"{1007F41F-7D69-468E-8017-3849A5A973C2}" = ThinkVantage Technologies Welcome Message
"{105CFC7C-6992-11D5-BD9D-000102C10FD8}" = LizardTech DjVu Control
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = Sonic DLA
"{1297C681-92D7-40EF-93BF-03F66EC5105C}" = ThinkPad EasyEject Utility
"{17CBC505-D1AE-459D-B445-3D2000A85842}" = ThinkPad UltraNav Utility
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = Integrated Camera
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{65706020-7B6F-41F2-8047-FC69579E386A}" = Presentation Director
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6ADD0603-16EF-400D-9F9E-486432835002}" = OpenOffice.org 3.2
"{7FC3BBEC-5A91-41B0-9CB8-960EC4421411}" = InterVideo WinDVD Creator 3
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84814E6B-2581-46EC-926A-823BD1C670F6}" = ThinkPad Bluetooth with Enhanced Data Rate Software
"{8675339C-128C-44DD-83BF-0A5D6ABD8297}" = System Update
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{986F64DC-FF15-449D-998F-EE3BCEC6666A}" = Help Center
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A0E64EBA-8BF0-49FB-90C0-BB3D781A2016}" = ThinkPad Power Manager
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = RecordNow Audio
"{AC76BA86-0000-7EC8-7489-000000000603}" = Adobe Acrobat and Reader 6.0.3 Update
"{AC76BA86-0000-7EC8-7489-000000000604}" = Adobe Acrobat and Reader 6.0.4 Update
"{AC76BA86-0000-7EC8-7489-000000000605}" = Adobe Acrobat and Reader 6.0.5 Update
"{AC76BA86-0000-7EC8-7489-000000000606}" = Adobe Acrobat and Reader 6.0.6 Update
"{AC76BA86-1033-0000-BA7E-000000000001}" = Adobe Acrobat 6.0.1 Standard
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = RecordNow Copy
"{B334D9AE-1393-423E-97C0-3BDC3360E692}" = Sonic Icons for Lenovo
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C54ED2B6-1AF2-416F-BBA8-5E2B8CDCB5C4}" = XP Themes
"{C6FA39A7-26B1-480A-BC74-6D17531AC222}" = Access Help
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CF5737AF-8550-4546-A69B-0EA9EF5A9B55}" = ThinkVantage Productivity Center
"{D728E945-256D-4477-B377-6BBA693714AC}" = Productivity Center Supplement for ThinkPad
"{DB150C19-4A8F-4EF7-AC75-96098EACE179}" = PDF Password Remover
"{DB71210F-8314-4AE3-B7A7-EBAF85BD30E9}" = Wallpapers
"{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}" = Message Center
"{F055E1B2-8A05-4D87-8039-1BE979BA4193}" = Client Security Solution
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F705E3E1-A471-426B-9A09-73429F3418EE}" = System Migration Assistant
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"7-Zip" = 7-Zip 4.65
"Adobe Atmosphere Player" = Adobe Atmosphere Player for Acrobat and Adobe Reader
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"aignesamdeadlink_is1" = AM-DeadLink 4.0
"AVG9Uninstall" = AVG Free 9.0
"AwayTask" = Maintenance Manager
"BitTorrent" = BitTorrent
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10140588" = ThinkPad Modem
"eBay Icon" = eBay Icon
"ERUNT_is1" = ERUNT 1.1j
"Fences" = Fences
"FileHippo.com" = FileHippo.com Update Checker
"FileLocator Pro_is1" = FileLocator Pro version 2.0
"FileMenu Tools_is1" = FileMenu Tools
"Glary Utilities_is1" = Glary Utilities 2.22.0.896
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Lenovo Registration" = Lenovo Registration
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Notepad++" = Notepad++
"NTREGOPT_is1" = NTREGOPT 1.1j
"NVIDIA Drivers" = NVIDIA Drivers
"OnScreenDisplay" = On Screen Display
"PC-Doctor for Windows" = Lenovo ThinkVantage Toolbox
"PCMCIAPW" = ThinkPad PC Card Power Policy
"Power Management Driver" = ThinkPad Power Management Driver
"PROSet" = Intel(R) PRO Network Connections Drivers
"QuicktimeAlt_is1" = QuickTime Alternative 3.2.2
"Readerware" = Readerware
"RealAlt_is1" = Real Alternative 1.9.0
"Remove Multimedia Center" = Remove Multimedia Center
"RocketDock_is1" = RocketDock 1.3.5
"Smart Defrag_is1" = Smart Defrag
"SynTPDeinstKey" = ThinkPad UltraNav Driver
"TaskSwitchXP" = TaskSwitchXP
"ThinkPad FullScreen Magnifier" = ThinkPad FullScreen Magnifier
"Unlocker" = Unlocker 1.8.9
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinPatrol" = WinPatrol 2009
"WMCSetup" = Windows Media Connect
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"WinDirStat" = WinDirStat 1.1.2

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

other log in next post

Here is the first half of the second OTL log:

OTL logfile created on: 5/19/2010 7:35:04 PM - Run 1
OTL by OldTimer - Version 3.2.5.0 Folder = C:\Documents and Settings\William\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 65.00% Memory free
3.00 Gb Paging File | 2.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): C:\pagefile.sys 1000 1000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 292.28 Gb Total Space | 212.12 Gb Free Space | 72.57% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: BILL
Current User Name: William
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/05/19 19:34:17 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\William\desktop\OTL.exe
PRC - [2010/04/20 19:55:54 | 002,064,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2010/04/20 19:55:53 | 000,620,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2010/04/02 13:33:30 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/04/01 11:24:47 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2010/03/16 11:59:59 | 000,508,184 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2010/03/16 11:59:57 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2010/03/16 11:59:33 | 000,916,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgemc.exe
PRC - [2010/03/16 11:59:32 | 000,710,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2009/10/10 14:07:08 | 000,320,832 | ---- | M] (BillP Studios) -- C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
PRC - [2009/09/28 17:27:18 | 000,144,752 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\ZOOM\TpScrex.exe
PRC - [2009/07/15 11:18:00 | 000,062,320 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
PRC - [2009/03/13 18:32:46 | 000,068,976 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
PRC - [2009/02/02 19:04:08 | 000,067,432 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
PRC - [2008/07/03 23:17:00 | 000,118,784 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
PRC - [2008/06/06 18:21:04 | 000,181,536 | ---- | M] (Lenovo.) -- C:\WINDOWS\system32\TpShocks.exe
PRC - [2008/05/14 16:21:16 | 000,037,416 | ---- | M] (Lenovo.) -- C:\WINDOWS\system32\TPHDEXLG.exe
PRC - [2008/04/13 17:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/03/04 10:34:20 | 000,487,424 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
PRC - [2007/03/22 10:02:00 | 000,120,368 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE
PRC - [2007/02/27 18:43:30 | 000,561,213 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
PRC - [2007/02/01 11:00:01 | 000,419,376 | ---- | M] (LENOVO) -- C:\Program Files\ThinkVantage\AMSG\Amsg.exe
PRC - [2006/02/02 05:20:00 | 000,122,940 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\DLA\DLACTRLW.EXE
PRC - [2003/10/23 21:37:56 | 000,217,194 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe


========== Modules (SafeList) ==========

MOD - [2010/05/19 19:34:17 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\William\desktop\OTL.exe
MOD - [2008/04/13 17:10:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2008/03/13 19:46:22 | 000,079,224 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\HKVOLKEY.dll
MOD - [2007/03/26 11:03:20 | 000,057,344 | ---- | M] (BillP Studios) -- C:\Program Files\BillP Studios\WinPatrol\patrolpro.dll
MOD - [2007/02/27 18:45:10 | 000,053,248 | ---- | M] () -- C:\Program Files\ThinkPad\Bluetooth Software\BTKeyInd.dll
MOD - [2007/02/27 17:48:08 | 000,077,824 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\BtMmHook.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (Windows MSI)
SRV - [2010/03/16 11:59:57 | 000,308,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2010/03/16 11:59:33 | 000,916,760 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2009/11/18 15:04:18 | 000,038,248 | ---- | M] (Lenovo.) [Disabled | Stopped] -- C:\WINDOWS\system32\ibmpmsvc.exe -- (IBMPMSVC)
SRV - [2009/09/21 15:55:12 | 000,858,384 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2009/09/21 15:44:48 | 000,954,368 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R)
SRV - [2009/09/21 15:31:36 | 000,473,360 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2009/07/15 11:18:00 | 000,062,320 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC)
SRV - [2009/07/03 19:47:08 | 000,045,424 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE)
SRV - [2009/06/12 10:55:48 | 000,028,672 | ---- | M] (Lenovo Group Limited) [Disabled | Stopped] -- c:\Program Files\Lenovo\System Update\SUService.exe -- (SUService)
SRV - [2008/05/14 16:21:16 | 000,037,416 | ---- | M] (Lenovo.) [Auto | Running] -- C:\WINDOWS\system32\TPHDEXLG.exe -- (TPHDEXLGSVC)
SRV - [2008/03/04 10:34:12 | 001,122,304 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe -- (TVT Scheduler)
SRV - [2007/09/26 17:34:46 | 000,644,408 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe -- (ThinkVantage Registry Monitor Service)
SRV - [2007/02/27 18:35:04 | 000,266,295 | ---- | M] (Broadcom Corporation.) [Disabled | Stopped] -- C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2007/01/30 19:45:42 | 000,722,496 | ---- | M] (IBM) [On_Demand | Stopped] -- C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe -- (TSSCoreService)
SRV - [2007/01/29 20:05:02 | 000,108,080 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\WINDOWS\system32\IPSSVC.EXE -- (IPSSVC)
SRV - [2005/11/14 02:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)


========== Driver Services (SafeList) ==========

DRV - [2010/04/20 19:55:53 | 000,242,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010/03/16 11:59:59 | 000,029,512 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010/03/16 11:59:32 | 000,216,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010/02/11 05:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2009/11/18 15:03:36 | 000,026,608 | ---- | M] (Lenovo.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ibmpmdrv.sys -- (IBMPMDRV)
DRV - [2009/09/15 12:34:10 | 005,977,216 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw5x32.sys -- (NETw5x32) Intel(R)
DRV - [2009/08/10 01:46:38 | 000,013,952 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2009/01/14 17:37:00 | 006,620,064 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2009/01/07 05:03:00 | 000,004,608 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\TSMAPIP.SYS -- (TSMAPIP)
DRV - [2008/11/03 18:56:40 | 000,327,192 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2008/07/03 22:53:00 | 000,225,664 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2008/06/18 03:42:23 | 000,007,012 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\pmemnt.sys -- (pmem)
DRV - [2008/05/14 16:21:16 | 000,114,728 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\Apsx86.sys -- (Shockprf)
DRV - [2008/05/14 16:21:16 | 000,019,496 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\ApsHM86.sys -- (TPDIGIMN)
DRV - [2008/05/12 23:14:14 | 000,017,844 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\TPHKDRV.sys -- (TPHKDRV)
DRV - [2008/04/24 17:53:22 | 000,308,736 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
DRV - [2008/04/13 11:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/13 11:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008/04/13 11:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008/04/13 09:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008/01/02 23:53:30 | 000,252,048 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1e5132.sys -- (e1express) Intel(R)
DRV - [2007/11/26 23:37:00 | 002,236,544 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Intel(R)
DRV - [2007/11/01 16:26:36 | 000,989,696 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2007/11/01 16:25:32 | 000,211,456 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2007/11/01 16:25:22 | 000,731,520 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2007/05/22 15:59:38 | 000,030,336 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tvti2c.sys -- (TVTI2C)
DRV - [2007/02/27 02:02:00 | 000,868,042 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2007/02/18 22:56:46 | 000,021,376 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psadd.sys -- (psadd)
DRV - [2007/02/08 13:30:28 | 000,017,664 | ---- | M] (Lenovo Group Limited) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tvtpktfilter.sys -- (TVTPktFilter)
DRV - [2006/11/06 01:24:56 | 000,012,080 | ---- | M] (Lenovo Group Limited) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PROCDD.SYS -- (PROCDD)
DRV - [2006/03/01 03:30:00 | 000,089,472 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS -- (DRVMCDB)
DRV - [2006/02/02 05:20:00 | 000,094,332 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2006/02/02 05:20:00 | 000,087,036 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2006/02/02 05:20:00 | 000,086,652 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2006/02/02 05:20:00 | 000,025,628 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2006/02/02 05:20:00 | 000,014,684 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2006/02/02 05:20:00 | 000,006,364 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2006/02/02 05:20:00 | 000,002,496 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLADResN.SYS -- (DLADResN)
DRV - [2005/11/18 12:02:50 | 000,005,660 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2005/11/18 12:02:10 | 000,022,684 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_N.SYS -- (DLARTL_N)
DRV - [2005/11/18 05:20:00 | 000,040,544 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS -- (DRVNDDM)
DRV - [2005/05/17 10:20:08 | 000,015,872 | ---- | M] (Atmel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atmeltpm.sys -- (atmeltpm)
DRV - [2004/11/30 16:38:24 | 000,004,442 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\TPPWRIF.SYS -- (TPPWRIF)
DRV - [2004/08/04 05:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2004/08/04 05:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2003/09/10 23:36:54 | 000,021,060 | ---- | M] (InterVideo, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\iviaspi.sys -- (Iviaspi)
DRV - [2001/08/17 14:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001/08/17 14:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001/08/17 14:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001/08/17 14:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001/08/17 14:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001/08/17 13:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001/08/17 13:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001/08/17 13:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001/08/17 13:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001/08/17 13:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001/08/17 13:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001/08/17 13:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001/08/17 13:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001/08/17 13:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001/08/17 13:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
DRV - [2001/08/17 05:20:04 | 000,096,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ac97intc.sys -- (ac97intc) Intel(r) 82801 Audio Driver Install Service (WDM)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/us/en/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = http://proxy.ucla.edu/cgi/proxy

========== FireFox ==========

FF - prefs.js..browser.search.addSBtoToolbar: false
FF - prefs.js..browser.search.autosizerwizard: ""
FF - prefs.js..browser.search.openintab: true
FF - prefs.js..browser.search.revertOnSubmit: true
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/firefox?client=firefox-a&rlz=1R0GGLL_en"
FF - prefs.js..browser.startup.homepage: "http://majorgeeks.com/downloadget.php?id=5610&file=15&evp=f765c64504d77bad3d6ce2f32b32da32"
FF - prefs.js..extensions.enabledItems: listit@csail.mit.edu:0.4.8.5
FF - prefs.js..extensions.enabledItems: autopager@mozilla.org:0.6.0.26
FF - prefs.js..extensions.enabledItems: optimizegoogle@optimizegoogle.com:0.77
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.80
FF - prefs.js..extensions.enabledItems: zotero@chnm.gmu.edu:2.0.2
FF - prefs.js..extensions.enabledItems: historyTree@norman.solomon:1.2
FF - prefs.js..extensions.enabledItems: gmailthis@lazyrussian.com:2.2.9
FF - prefs.js..extensions.enabledItems: {6b2a52f3-07c2-4c37-bf05-efa81b340ea1}:1.1
FF - prefs.js..extensions.enabledItems: {ada4b710-8346-4b82-8199-5de2b400a6ae}:1.9.8.1
FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5
FF - prefs.js..extensions.enabledItems: wikilook@testpilot:2.5.5
FF - prefs.js..extensions.enabledItems: lazarus@interclue.com:2.0.5
FF - prefs.js..extensions.enabledItems: faviconizetab@espion.just-size.jp:1.0.1
FF - prefs.js..extensions.enabledItems: {C0CB8BA3-6C1B-47e8-A6AB-1FAB889562D9}:0.6.0.5
FF - prefs.js..extensions.enabledItems: firefox-managefolders@googlecode.com:1.0.3
FF - prefs.js..extensions.enabledItems: {B9C8BE50-7105-4ec6-8FB4-4935C0671648}:0.5.995
FF - prefs.js..extensions.enabledItems: isreaditlater@ideashower.com:2.0.6
FF - prefs.js..extensions.enabledItems: {53A03D43-5363-4669-8190-99061B2DEBA5}:1.3.7
FF - prefs.js..extensions.enabledItems: properties@darktrojan.net:6
FF - prefs.js..extensions.enabledItems: hidefavicons@maarten:1.3.4
FF - prefs.js..extensions.enabledItems: {21e48e29-f574-4619-b65d-0f00eea92e5b}:1.78
FF - prefs.js..extensions.enabledItems: {EDA7B1D7-F793-4e03-B074-E6F303317FB0}:1.2.6
FF - prefs.js..extensions.enabledItems: foxmarks@kei.com:3.6.14
FF - prefs.js..extensions.enabledItems: chromeview@systemantics.net:0.2.1
FF - prefs.js..extensions.enabledItems: sqlite_opt@c_sar.jp:0.7.7
FF - prefs.js..extensions.enabledItems: {FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}:1.3.5
FF - prefs.js..extensions.enabledItems: restart@restart.org:0.3
FF - prefs.js..extensions.enabledItems: lintasnusa@gmail.com:1.1
FF - prefs.js..extensions.enabledItems: yetanothersmoothscrolling@kataho:3.0.13
FF - prefs.js..extensions.enabledItems: {7c9a24c3-9d29-43cf-9264-d3ec3ea607c2}:0.3.6
FF - prefs.js..extensions.enabledItems: {0974848a-b5bc-49f2-9778-307742b4a55d}:2.5.8.6
FF - prefs.js..extensions.enabledItems: {29852C08-1E91-4889-A6BF-C77F91D6A8F3}:1.8.59
FF - prefs.js..network.proxy.autoconfig_url: "http://proxy.ucla.edu/cgi/proxy"
FF - prefs.js..network.proxy.type: 2

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/04/25 00:03:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/05/19 19:14:51 | 000,000,000 | ---D | M]

[2010/02/15 14:47:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Extensions
[2010/05/19 19:13:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions
[2010/05/02 21:02:55 | 000,000,000 | ---D | M] (softonic.com4 Toolbar) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{0974848a-b5bc-49f2-9778-307742b4a55d}
[2010/03/04 01:38:46 | 000,000,000 | ---D | M] (FireShot) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2010/04/10 01:02:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{21e48e29-f574-4619-b65d-0f00eea92e5b}
[2010/04/23 14:36:13 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{29852C08-1E91-4889-A6BF-C77F91D6A8F3}
[2010/04/30 17:45:46 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/05/02 21:40:00 | 000,000,000 | ---D | M] (FEBE) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
[2010/03/29 01:08:56 | 000,000,000 | ---D | M] (ScrapBook) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{53A03D43-5363-4669-8190-99061B2DEBA5}
[2010/03/24 01:04:55 | 000,000,000 | ---D | M] (Speed Dial) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}
[2010/03/12 01:21:27 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{6b2a52f3-07c2-4c37-bf05-efa81b340ea1}
[2010/04/30 17:42:38 | 000,000,000 | ---D | M] (NoScript) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010/05/02 12:13:08 | 000,000,000 | ---D | M] (Create Shortcut) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{7c9a24c3-9d29-43cf-9264-d3ec3ea607c2}
[2010/04/21 16:45:48 | 000,000,000 | ---D | M] (ReminderFox) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
[2010/03/29 00:39:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{B9C8BE50-7105-4ec6-8FB4-4935C0671648}
[2010/03/29 00:14:48 | 000,000,000 | ---D | M] (QuickNote) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{C0CB8BA3-6C1B-47e8-A6AB-1FAB889562D9}
[2010/04/11 23:01:13 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010/04/28 23:55:23 | 000,000,000 | ---D | M] (BlockSite) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}
[2010/05/19 19:12:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010/04/11 01:33:04 | 000,000,000 | ---D | M] (Menu Editor) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}
[2010/04/24 23:25:28 | 000,000,000 | ---D | M] (IE View Lite) -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}
[2010/04/21 16:45:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\autopager@mozilla.org
[2010/04/23 22:53:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\chromeview@systemantics.net
[2010/03/28 23:55:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\faviconizetab@espion.just-size.jp
[2010/03/29 00:18:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\firefox-managefolders@googlecode.com
[2010/04/21 16:45:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\foxmarks@kei.com
[2010/03/19 16:55:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\gmailthis@lazyrussian.com
[2010/03/30 18:51:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\gui_minify@alcacoop.it
[2010/03/30 18:25:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\hidefavicons@maarten
[2010/03/04 01:56:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\historyTree@norman.solomon
[2010/04/10 01:02:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\isreaditlater@ideashower.com
[2010/03/28 22:45:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\lazarus@interclue.com
[2010/04/25 02:13:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\lintasnusa@gmail.com
[2010/03/04 00:01:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\listit@csail.mit.edu
[2010/03/04 01:35:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\optimizegoogle@optimizegoogle.com
[2010/03/30 17:11:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\properties@darktrojan.net
[2010/04/24 23:33:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\restart@restart.org
[2010/04/24 22:03:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\sqlite_opt@c_sar.jp
[2010/03/28 22:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\wikilook@testpilot
[2010/04/26 01:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\yetanothersmoothscrolling@kataho
[2010/03/16 00:20:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\extensions\zotero@chnm.gmu.edu
[2010/04/23 16:14:23 | 000,001,183 | ---- | M] () -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\searchplugins\4shared.xml
[2010/05/15 23:12:36 | 000,001,110 | ---- | M] () -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\searchplugins\dmoz.xml
[2010/04/23 21:12:44 | 000,010,952 | ---- | M] () -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\searchplugins\gutenberg.xml
[2010/03/13 01:30:54 | 000,002,173 | ---- | M] () -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\searchplugins\plenty-of-torrents.xml
[2010/03/13 01:00:25 | 000,001,115 | ---- | M] () -- C:\Documents and Settings\William\Application Data\Mozilla\Firefox\Profiles\z69yk9d4.default\searchplugins\rapidshare-filefinder.xml
[2010/05/19 19:13:30 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/05/19 17:13:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/05/19 17:13:30 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009/07/31 13:06:48 | 001,654,784 | ---- | M] (LizardTech) -- C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll

O1 HOSTS File: ([2010/05/17 18:58:19 | 000,465,197 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 ___id___.c.mystat-in.net
O1 - Hosts: 127.0.0.1 0.r.msn.com
O1 - Hosts: 127.0.0.1 005.free-counter.co.uk
O1 - Hosts: 127.0.0.1 006.free-counter.co.uk
O1 - Hosts: 127.0.0.1 007.free-counter.co.uk
O1 - Hosts: 127.0.0.1 008.free-counter.co.uk
O1 - Hosts: 127.0.0.1 008.free-counters.co.uk
O1 - Hosts: 127.0.0.1 00fun.com
O1 - Hosts: 127.0.0.1 011707160008.c.mystat-in.net
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 061606084448.c.mystat-in.net
O1 - Hosts: 127.0.0.1 070806142521.c.mystat-in.net
O1 - Hosts: 127.0.0.1 08search.com
O1 - Hosts: 127.0.0.1 090906042103.c.mystat-in.net
O1 - Hosts: 127.0.0.1 092706152958.c.mystat-in.net
O1 - Hosts: 127.0.0.1 0d7292.r.axf8.net
O1 - Hosts: 127.0.0.1 1.adbrite.com
O1 - Hosts: 127.0.0.1 1.globalonlineweb.com
O1 - Hosts: 127.0.0.1 1.googlenews.xorg.pl
O1 - Hosts: 127.0.0.1 1.marketbanker.com
O1 - Hosts: 127.0.0.1 1.ofsnetwork.com
O1 - Hosts: 127.0.0.1 1.sharkadnetwork.com
O1 - Hosts: 127.0.0.1 100.mbn.com.ua
O1 - Hosts: 127.0.0.1 100.topnews.ru
O1 - Hosts: 14865 more lines...
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - No CLSID value found.
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O2 - BHO: (CPwmIEBrowserHelper Object) - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll ()
O4 - HKLM..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe (LENOVO)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [LPManager] C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [PWRMGRTR] C:\Program Files\ThinkPad\Utilities\PWRMGRTR.DLL (Lenovo Group Limited)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe (BillP Studios)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe (Adobe Systems Inc.)
O4 - Startup: C:\Documents and Settings\William\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Reg Error: Value error. File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: google.com ([www] http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([*.windowsupdate] http in Trusted sites)
O15 - HKCU\..Trusted Domains: windowsupdate.com ([]http in Trusted sites)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6087.cab (Windows Live Safety Center Base Module)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.165.165,93.188.166.175
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\tpfnf2: DllName - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll ()
O20 - Winlogon\Notify\WgaLogon: DllName - - File not found
O22 - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences\FencesMenu.dll (Stardock)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/04/30 00:13:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: Ias - C:\WINDOWS\system32\ias [2008/06/18 03:02:00 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

MsConfig - StartUpReg: EZEJMNAP - hkey= - key= - C:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXE (Lenovo Group Limited)
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 0

SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: nm - File not found
SafeBootNet: nm.sys - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

Here is the second half of the OTL log:

ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.UnInstall.PerUser
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - rundll32.exe C:\WINDOWS\system32\Setup\FxsOcm.dll,XP_UninstallProvider
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D} - Microsoft .NET Framework 1.1 Security Update (KB953297)
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {EF289A85-8E57-408d-BE47-73B55609861A} - RootsUpdate
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2010/05/19 19:34:17 | 000,571,904 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\William\Desktop\OTL.exe
[2010/05/19 19:11:14 | 027,386,256 | ---- | C] ( ) -- C:\Documents and Settings\William\Desktop\AdbeRdr930_en_US.exe
[2010/05/19 17:13:40 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010/05/19 17:13:39 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/05/19 17:13:39 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/05/19 17:13:39 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/05/19 17:13:28 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/05/18 11:15:40 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\William\Recent
[2010/05/17 20:07:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Application Data\Malwarebytes
[2010/05/17 20:07:37 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/05/17 20:07:37 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/05/17 20:07:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/05/17 20:07:36 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/05/16 18:25:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Desktop\RootRepeal
[2010/05/16 12:10:03 | 000,000,000 | ---D | C] -- C:\Program Files\LizardTech
[2010/05/14 23:10:10 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/05/14 23:03:32 | 000,095,024 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010/05/14 18:34:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Desktop\z69yk9d4.default
[2010/05/14 01:50:23 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live Safety Center
[2010/05/14 01:20:14 | 000,000,000 | -H-D | C] -- C:\$AVG
[2010/05/10 13:15:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Local Settings\Application Data\Collectorz.com
[2010/05/10 13:14:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\My Documents\Book Collector
[2010/05/10 01:59:00 | 006,931,008 | ---- | C] (Caminova, Inc. ) -- C:\Documents and Settings\William\Desktop\DJVUCTRL-6.1.4-en-r2013.exe
[2010/05/09 20:39:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\My Documents\Marxist
[2010/05/09 12:30:19 | 000,000,000 | ---D | C] -- C:\Program Files\CubicExplorer_dev
[2010/05/06 23:51:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\LunarFrog
[2010/05/06 00:16:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Application Data\Corel
[2010/05/06 00:16:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Corel
[2010/05/04 12:24:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Desktop\Untried Setups
[2010/05/02 21:05:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\My Documents\Readerware
[2010/05/02 21:05:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\.readerware
[2010/05/02 21:03:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\Readerware
[2010/05/02 21:03:19 | 000,000,000 | ---D | C] -- C:\Program Files\Readerware
[2010/05/02 21:02:57 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit
[2010/05/02 21:02:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\Local Settings\Application Data\Conduit
[2010/04/30 18:15:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\My Documents\Books for Sale
[2010/04/29 01:38:55 | 000,000,000 | ---D | C] -- C:\Program Files\HostsXpert
[2010/04/26 22:18:18 | 000,000,000 | ---D | C] -- C:\Program Files\Viewpoint
[2010/04/26 21:52:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\Adobe PDF 6.0
[2010/04/26 21:09:30 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010/04/25 00:08:05 | 000,000,000 | ---D | C] -- C:\Program Files\Corel
[2010/04/25 00:07:08 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll
[2010/04/25 00:07:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010/04/24 23:52:59 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/04/23 13:58:30 | 000,000,000 | R--D | C] -- C:\Documents and Settings\William\My Documents\My Videos
[2010/04/22 14:08:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\William\My Documents\Logicomix
[2010/04/19 22:15:32 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2008/06/18 03:23:28 | 000,167,936 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll
[2008/06/18 03:23:27 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll

========== Files - Modified Within 30 Days ==========

[2010/05/19 19:34:17 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\William\Desktop\OTL.exe
[2010/05/19 19:27:52 | 004,456,448 | ---- | M] () -- C:\Documents and Settings\William\ntuser.dat
[2010/05/19 19:14:51 | 000,001,836 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Adobe Reader 9.lnk
[2010/05/19 19:13:53 | 027,386,256 | ---- | M] ( ) -- C:\Documents and Settings\William\Desktop\AdbeRdr930_en_US.exe
[2010/05/19 19:00:00 | 000,000,986 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2688012036-3804731028-755555076-1005UA.job
[2010/05/19 18:53:35 | 000,000,324 | ---- | M] () -- C:\WINDOWS\tasks\PMTask.job
[2010/05/19 17:40:06 | 000,520,684 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/05/19 17:40:06 | 000,440,980 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/05/19 17:40:06 | 000,071,282 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/05/19 17:35:59 | 000,022,776 | ---- | M] () -- C:\Documents and Settings\William\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/05/19 17:35:59 | 000,000,316 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2010/05/19 17:35:57 | 000,000,308 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBackup.job
[2010/05/19 17:35:53 | 000,184,454 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/05/19 17:35:53 | 000,028,029 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001
[2010/05/19 17:35:36 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/05/19 17:35:35 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/05/19 17:35:31 | 2128,916,480 | -HS- | M] () -- C:\hiberfil.sys
[2010/05/19 17:35:31 | 000,138,848 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/05/19 17:34:28 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\William\ntuser.ini
[2010/05/19 17:26:05 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/05/19 17:17:14 | 060,185,144 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/05/19 17:13:30 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/05/19 17:13:30 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/05/19 17:13:30 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/05/19 17:13:30 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/05/19 17:13:30 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010/05/19 17:06:25 | 000,071,798 | ---- | M] () -- C:\Documents and Settings\William\Desktop\JavaRa.zip
[2010/05/19 16:56:52 | 163,936,024 | ---- | M] () -- C:\Documents and Settings\William\Desktop\jdk-6u20-javafx-1_3-windows-i586.exe
[2010/05/19 01:18:07 | 000,167,066 | ---- | M] () -- C:\Documents and Settings\William\Desktop\The_Berlin_School.pdf
[2010/05/18 23:16:57 | 000,001,988 | ---- | M] () -- C:\Documents and Settings\William\Desktop\HiJackThis.lnk
[2010/05/18 23:15:21 | 000,000,753 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Shortcut to UpdateChecker.exe.lnk
[2010/05/18 23:03:06 | 000,001,831 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk
[2010/05/18 23:02:59 | 003,603,615 | ---- | M] () -- C:\Documents and Settings\William\Desktop\chess - Alburt, L. - Chess Training Pocket Book 300 Most Important Positions and Ideas, 2nd Ed (2000).pdf
[2010/05/18 23:00:00 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2688012036-3804731028-755555076-1005Core.job
[2010/05/18 22:58:25 | 000,079,141 | ---- | M] () -- C:\Documents and Settings\William\Desktop\chomsky.pdf
[2010/05/18 20:17:23 | 000,000,426 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{13C0F17C-4B81-4998-9A3E-A1841ECF4B2B}.job
[2010/05/18 12:01:23 | 000,000,340 | ---- | M] () -- C:\WINDOWS\tasks\SystemToolsDailyTest.job
[2010/05/18 11:19:22 | 000,025,992 | ---- | M] (Sysinternals - www.sysinternals.com) -- C:\WINDOWS\System32\pgdfgsvc.exe
[2010/05/18 10:54:12 | 004,456,448 | ---- | M] () -- C:\Documents and Settings\William\ntuser.dat.gbck
[2010/05/17 20:07:40 | 000,000,703 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/05/17 18:58:19 | 000,465,197 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS
[2010/05/16 14:21:00 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/05/16 12:16:25 | 000,000,738 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Shortcut to MSASCui.exe.lnk
[2010/05/16 12:13:16 | 000,000,927 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Shortcut to DjVuViewer.exe.lnk
[2010/05/16 12:05:34 | 000,028,951 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Readerware Corporation.pdf
[2010/05/15 23:00:46 | 004,456,448 | ---- | M] () -- C:\Documents and Settings\William\ntuser.bak
[2010/05/15 00:21:50 | 000,464,491 | ---- | M] () -- C:\Documents and Settings\William\Desktop\RootRepeal.zip
[2010/05/14 23:03:31 | 000,095,024 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2010/05/13 19:30:32 | 000,000,745 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/05/10 12:18:52 | 000,002,828 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2010/05/10 12:18:48 | 000,000,088 | RHS- | M] () -- C:\Documents and Settings\All Users\Application Data\601473A274.sys
[2010/05/10 02:11:05 | 002,756,673 | ---- | M] () -- C:\Documents and Settings\William\Desktop\the_necessary_angel_-_essays_on_reality_and_the_imagination.pdf
[2010/05/10 01:59:19 | 006,931,008 | ---- | M] (Caminova, Inc. ) -- C:\Documents and Settings\William\Desktop\DJVUCTRL-6.1.4-en-r2013.exe
[2010/05/10 00:10:01 | 000,001,032 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Shortcut to Quotes.exe.lnk
[2010/05/07 00:01:46 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Glary Utilities.lnk
[2010/05/06 10:36:38 | 000,221,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2010/05/05 00:22:18 | 000,202,375 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Langston Hughes.pdf
[2010/05/04 23:01:36 | 000,001,639 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Update Checker.lnk
[2010/05/04 02:36:18 | 000,024,574 | R--- | M] () -- C:\Documents and Settings\William\Desktop\List of Free E-books sites[1].rtf
[2010/05/04 01:36:01 | 092,064,481 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Plato_Complete_Works.pdf
[2010/05/04 01:35:19 | 005,576,952 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Harvey - The Limits to Capital.pdf
[2010/05/04 01:24:34 | 031,333,509 | ---- | M] () -- C:\Documents and Settings\William\Desktop\David Harvey Essay Collection.ZIP
[2010/05/04 01:21:52 | 016,903,215 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Critchley, Simon - The book of dead philosophers.pdf
[2010/05/04 01:19:36 | 012,684,310 | ---- | M] () -- C:\Documents and Settings\William\Desktop\12669-historical_ontology.pdf
[2010/05/04 01:16:44 | 005,469,899 | ---- | M] () -- C:\Documents and Settings\William\Desktop\12770-epistemology_the_big_questions.pdf
[2010/05/04 01:15:37 | 016,145,065 | ---- | M] () -- C:\Documents and Settings\William\Desktop\harvey, essay collection (2).zip
[2010/05/04 01:04:51 | 002,330,162 | ---- | M] () -- C:\Documents and Settings\William\Desktop\9643-bob_dylan_songbook.pdf
[2010/05/03 00:48:39 | 000,005,596 | ---- | M] () -- C:\Documents and Settings\William\Desktop\books.html
[2010/05/02 22:56:29 | 000,000,074 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Readerware Books Search Page.URL
[2010/05/02 21:34:37 | 000,237,933 | ---- | M] () -- C:\Documents and Settings\William\Desktop\bookmarks{default}.html
[2010/05/01 01:18:22 | 000,000,304 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/05/01 01:18:22 | 000,000,023 | ---- | M] () -- C:\WINDOWS\ANS2000.INI
[2010/05/01 01:18:11 | 000,968,971 | ---- | M] () -- C:\Documents and Settings\William\Desktop\iron-cook-book.exe
[2010/04/30 02:28:21 | 000,000,836 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Shortcut Hxpert.exe.lnk
[2010/04/29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/04/29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/04/28 22:29:27 | 000,000,044 | ---- | M] () -- C:\WINDOWS\SMWizard.INI
[2010/04/28 00:25:17 | 000,080,206 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Identity and Indiscernibility (Hawley).pdf
[2010/04/28 00:08:40 | 000,064,799 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Entity, But No Identity (Krause).pdf
[2010/04/28 00:05:58 | 000,111,793 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Are Elementary Particles Individuals--Public.pdf
[2010/04/27 23:47:18 | 000,442,248 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Identity Statements (May).pdf
[2010/04/27 23:38:51 | 000,033,751 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Identity in Physics, A Historical, Philosophical, and Formal Analysis (Hawley, Krause-French).pdf
[2010/04/27 23:19:24 | 000,083,199 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Identity in Physics, a Historical, Philosophical, and Formal Analysis (Resenhas-Krause, French).pdf
[2010/04/27 23:10:31 | 000,155,122 | ---- | M] () -- C:\Documents and Settings\William\Desktop\The metaphysics of non-individuality (Krause).pdf
[2010/04/27 14:30:24 | 000,053,851 | ---- | M] () -- C:\Documents and Settings\William\Desktop\mp2005_1-Monaghan.pdf
[2010/04/27 14:22:19 | 000,061,266 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Identity and Predication (Dufour).pdf
[2010/04/27 14:01:36 | 000,347,553 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Plato_On_Identity_Sameness_And_Difference (Gerson).pdf
[2010/04/27 13:41:29 | 000,190,710 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Minimal Propositions, Cognitive Safety Mechanisms, and Psychological Reality (Elugardo).pdf
[2010/04/27 13:39:57 | 000,061,150 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Minimal Semantics (Borg-Carston).pdf
[2010/04/27 13:37:40 | 000,054,790 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Meanings Before Truth Conditions (Pietroski).pdf
[2010/04/27 13:25:52 | 000,134,393 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Insensitive Semantics (Travis).pdf
[2010/04/27 13:25:10 | 000,195,874 | ---- | M] () -- C:\Documents and Settings\William\Desktop\A Sense of Occasion (Travis).pdf
[2010/04/27 13:24:19 | 000,291,140 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Frege, Father of Disjunctivism (Travis).pdf
[2010/04/27 13:23:54 | 000,267,227 | ---- | M] () -- C:\Documents and Settings\William\Desktop\On Representing as So (Travis).pdf
[2010/04/27 13:23:20 | 000,285,355 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Gazing Inward (Travis).pdf
[2010/04/27 13:22:31 | 000,195,658 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Affording Us The World (Travis).pdf
[2010/04/27 13:18:44 | 000,308,852 | ---- | M] () -- C:\Documents and Settings\William\Desktop\The Proposition's Progress (Travis).pdf
[2010/04/26 22:39:57 | 002,647,549 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Shifting Situations and Shaken Attitudes (Interview with Barwise and Perry).pdf
[2010/04/26 22:18:19 | 000,037,027 | ---- | M] () -- C:\WINDOWS\atmoUn.exe
[2010/04/26 22:17:10 | 000,183,537 | ---- | M] () -- C:\Documents and Settings\William\Desktop\lecture3.pdf
[2010/04/26 22:16:49 | 000,000,488 | ---- | M] () -- C:\Documents and Settings\William\Desktop\index.html
[2010/04/26 22:14:53 | 000,138,351 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Merger.revised.Jul07.pdf
[2010/04/26 22:14:04 | 000,022,032 | ---- | M] () -- C:\Documents and Settings\William\Desktop\jp.htm
[2010/04/26 22:13:25 | 000,002,542 | ---- | M] () -- C:\Documents and Settings\William\Desktop\WittProp4.pdf
[2010/04/26 22:05:37 | 000,251,625 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Variadic Function and Pragmatics-Rich Representations of Belief Reports (Jacsztolt).pdf
[2010/04/26 22:04:55 | 000,165,134 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Answerable and Unanswerable Questions (Thomasson).pdf
[2010/04/26 22:04:36 | 000,158,082 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Hermeneutic Contextualism and the Knowledge Predicate (Horowitz).pdf
[2010/04/26 22:03:31 | 000,283,895 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Recovering_What_Is_Said_With_Empty_Names (Piccinnini).pdf
[2010/04/26 21:45:37 | 000,001,555 | ---- | M] () -- C:\Documents and Settings\William\Desktop\CCleaner.lnk
[2010/04/25 22:18:07 | 126,879,316 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Logicomix.pdf
[2010/04/25 22:16:20 | 010,881,943 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Binder6.pdf
[2010/04/25 22:14:29 | 036,265,424 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Binder5.pdf
[2010/04/25 22:12:30 | 024,218,368 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Binder4.pdf
[2010/04/25 22:10:27 | 015,096,190 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Binder3.pdf
[2010/04/25 20:17:30 | 000,198,459 | ---- | M] () -- C:\Documents and Settings\William\Desktop\The Nature and Purpose of Numbers (Antonelli).pdf
[2010/04/24 00:55:21 | 000,838,442 | ---- | M] () -- C:\Documents and Settings\William\Desktop\The-Big-Book-of-BitTorrent.pdf
[2010/04/23 13:58:23 | 000,000,789 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Windows Media Player.lnk
[2010/04/23 04:07:03 | 000,019,048 | ---- | M] () -- C:\Documents and Settings\William\Desktop\PLATO.AND.A.PLATYPUS.WALK.INTO.A.BAR.-.Cathcart.&.Klein..Read.by.torrent
[2010/04/22 22:57:52 | 015,545,234 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Binder2.pdf
[2010/04/22 22:47:49 | 025,347,266 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Binder1.pdf
[2010/04/22 13:49:46 | 000,000,907 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Shortcut to Acrobat.exe.lnk
[2010/04/21 17:16:48 | 000,048,032 | ---- | M] () -- C:\Documents and Settings\William\Desktop\logicomix_is_a_comic_book_ about_math_and_logic_.htm
[2010/04/21 17:04:35 | 000,318,372 | ---- | M] () -- C:\Documents and Settings\William\Desktop\logicomix-review-january-2010 (Mancosu).pdf
[2010/04/21 10:15:53 | 000,042,668 | ---- | M] () -- C:\Documents and Settings\William\Desktop\lendman.pdf
[2010/04/21 02:33:25 | 000,057,685 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Cooking With Whole Wheat.pdf
[2010/04/21 02:31:08 | 000,048,012 | ---- | M] () -- C:\Documents and Settings\William\Desktop\The UX600 Cinema Series.pdf
[2010/04/21 02:27:26 | 000,045,922 | ---- | M] () -- C:\Documents and Settings\William\Desktop\Upgrade From XP to Windows 7 Without Losing Everything.pdf
[2010/04/20 19:55:53 | 000,242,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/04/19 23:41:26 | 000,181,169 | ---- | M] () -- C:\Documents and Settings\William\My Documents\bookmarks.html

========== Files Created - No Company Name ==========

[2010/05/19 19:14:51 | 000,001,836 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Adobe Reader 9.lnk
[2010/05/19 17:06:25 | 000,071,798 | ---- | C] () -- C:\Documents and Settings\William\Desktop\JavaRa.zip
[2010/05/19 16:30:48 | 163,936,024 | ---- | C] () -- C:\Documents and Settings\William\Desktop\jdk-6u20-javafx-1_3-windows-i586.exe
[2010/05/19 01:18:07 | 000,167,066 | ---- | C] () -- C:\Documents and Settings\William\Desktop\The_Berlin_School.pdf
[2010/05/18 23:15:21 | 000,000,753 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Shortcut to UpdateChecker.exe.lnk
[2010/05/18 23:02:51 | 003,603,615 | ---- | C] () -- C:\Documents and Settings\William\Desktop\chess - Alburt, L. - Chess Training Pocket Book 300 Most Important Positions and Ideas, 2nd Ed (2000).pdf
[2010/05/18 22:58:25 | 000,079,141 | ---- | C] () -- C:\Documents and Settings\William\Desktop\chomsky.pdf
[2010/05/17 20:07:40 | 000,000,703 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/05/16 12:16:25 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Shortcut to MSASCui.exe.lnk
[2010/05/16 12:13:16 | 000,000,927 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Shortcut to DjVuViewer.exe.lnk
[2010/05/16 12:05:34 | 000,028,951 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Readerware Corporation.pdf
[2010/05/15 00:21:50 | 000,464,491 | ---- | C] () -- C:\Documents and Settings\William\Desktop\RootRepeal.zip
[2010/05/14 23:10:12 | 000,001,988 | ---- | C] () -- C:\Documents and Settings\William\Desktop\HiJackThis.lnk
[2010/05/10 02:11:02 | 002,756,673 | ---- | C] () -- C:\Documents and Settings\William\Desktop\the_necessary_angel_-_essays_on_reality_and_the_imagination.pdf
[2010/05/10 00:10:01 | 000,001,032 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Shortcut to Quotes.exe.lnk
[2010/05/06 02:42:42 | 000,002,828 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2010/05/06 02:42:42 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\601473A274.sys
[2010/05/05 00:22:18 | 000,202,375 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Langston Hughes.pdf
[2010/05/04 02:37:25 | 000,024,574 | R--- | C] () -- C:\Documents and Settings\William\Desktop\List of Free E-books sites[1].rtf
[2010/05/04 01:35:04 | 005,576,952 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Harvey - The Limits to Capital.pdf
[2010/05/04 01:29:25 | 092,064,481 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Plato_Complete_Works.pdf
[2010/05/04 01:23:06 | 031,333,509 | ---- | C] () -- C:\Documents and Settings\William\Desktop\David Harvey Essay Collection.ZIP
[2010/05/04 01:21:08 | 016,903,215 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Critchley, Simon - The book of dead philosophers.pdf
[2010/05/04 01:19:11 | 012,684,310 | ---- | C] () -- C:\Documents and Settings\William\Desktop\12669-historical_ontology.pdf
[2010/05/04 01:16:34 | 005,469,899 | ---- | C] () -- C:\Documents and Settings\William\Desktop\12770-epistemology_the_big_questions.pdf
[2010/05/04 01:14:43 | 016,145,065 | ---- | C] () -- C:\Documents and Settings\William\Desktop\harvey, essay collection (2).zip
[2010/05/04 01:04:51 | 002,330,162 | ---- | C] () -- C:\Documents and Settings\William\Desktop\9643-bob_dylan_songbook.pdf
[2010/05/03 00:48:39 | 000,005,596 | ---- | C] () -- C:\Documents and Settings\William\Desktop\books.html
[2010/05/02 22:56:29 | 000,000,074 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Readerware Books Search Page.URL
[2010/05/02 21:34:36 | 000,237,933 | ---- | C] () -- C:\Documents and Settings\William\Desktop\bookmarks{default}.html
[2010/05/01 01:18:22 | 000,000,023 | ---- | C] () -- C:\WINDOWS\ANS2000.INI
[2010/05/01 01:18:11 | 000,968,971 | ---- | C] () -- C:\Documents and Settings\William\Desktop\iron-cook-book.exe
[2010/04/30 02:28:21 | 000,000,836 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Shortcut Hxpert.exe.lnk
[2010/04/28 22:29:10 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI
[2010/04/28 00:25:15 | 000,080,206 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Identity and Indiscernibility (Hawley).pdf
[2010/04/28 00:08:38 | 000,064,799 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Entity, But No Identity (Krause).pdf
[2010/04/28 00:05:56 | 000,111,793 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Are Elementary Particles Individuals--Public.pdf
[2010/04/27 23:47:18 | 000,442,248 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Identity Statements (May).pdf
[2010/04/27 23:38:51 | 000,033,751 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Identity in Physics, A Historical, Philosophical, and Formal Analysis (Hawley, Krause-French).pdf
[2010/04/27 23:19:21 | 000,083,199 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Identity in Physics, a Historical, Philosophical, and Formal Analysis (Resenhas-Krause, French).pdf
[2010/04/27 23:10:16 | 000,155,122 | ---- | C] () -- C:\Documents and Settings\William\Desktop\The metaphysics of non-individuality (Krause).pdf
[2010/04/27 14:30:22 | 000,053,851 | ---- | C] () -- C:\Documents and Settings\William\Desktop\mp2005_1-Monaghan.pdf
[2010/04/27 14:22:19 | 000,061,266 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Identity and Predication (Dufour).pdf
[2010/04/27 14:01:34 | 000,347,553 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Plato_On_Identity_Sameness_And_Difference (Gerson).pdf
[2010/04/27 13:41:29 | 000,190,710 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Minimal Propositions, Cognitive Safety Mechanisms, and Psychological Reality (Elugardo).pdf
[2010/04/27 13:39:54 | 000,061,150 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Minimal Semantics (Borg-Carston).pdf
[2010/04/27 13:37:38 | 000,054,790 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Meanings Before Truth Conditions (Pietroski).pdf
[2010/04/27 13:25:51 | 000,134,393 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Insensitive Semantics (Travis).pdf
[2010/04/27 13:25:09 | 000,195,874 | ---- | C] () -- C:\Documents and Settings\William\Desktop\A Sense of Occasion (Travis).pdf
[2010/04/27 13:24:19 | 000,291,140 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Frege, Father of Disjunctivism (Travis).pdf
[2010/04/27 13:23:53 | 000,267,227 | ---- | C] () -- C:\Documents and Settings\William\Desktop\On Representing as So (Travis).pdf
[2010/04/27 13:23:16 | 000,285,355 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Gazing Inward (Travis).pdf
[2010/04/27 13:22:30 | 000,195,658 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Affording Us The World (Travis).pdf
[2010/04/27 13:18:44 | 000,308,852 | ---- | C] () -- C:\Documents and Settings\William\Desktop\The Proposition's Progress (Travis).pdf
[2010/04/26 22:18:19 | 000,037,027 | ---- | C] () -- C:\WINDOWS\atmoUn.exe
[2010/04/26 22:17:10 | 000,183,537 | ---- | C] () -- C:\Documents and Settings\William\Desktop\lecture3.pdf
[2010/04/26 22:16:48 | 000,000,488 | ---- | C] () -- C:\Documents and Settings\William\Desktop\index.html
[2010/04/26 22:14:50 | 000,138,351 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Merger.revised.Jul07.pdf
[2010/04/26 22:14:03 | 000,022,032 | ---- | C] () -- C:\Documents and Settings\William\Desktop\jp.htm
[2010/04/26 22:13:25 | 000,002,542 | ---- | C] () -- C:\Documents and Settings\William\Desktop\WittProp4.pdf
[2010/04/26 22:05:33 | 000,251,625 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Variadic Function and Pragmatics-Rich Representations of Belief Reports (Jacsztolt).pdf
[2010/04/26 22:04:50 | 000,165,134 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Answerable and Unanswerable Questions (Thomasson).pdf
[2010/04/26 22:04:36 | 000,158,082 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Hermeneutic Contextualism and the Knowledge Predicate (Horowitz).pdf
[2010/04/26 22:03:31 | 000,283,895 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Recovering_What_Is_Said_With_Empty_Names (Piccinnini).pdf
[2010/04/26 21:53:17 | 000,001,831 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk
[2010/04/25 22:17:56 | 126,879,316 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Logicomix.pdf
[2010/04/25 22:16:18 | 010,881,943 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Binder6.pdf
[2010/04/25 22:14:27 | 036,265,424 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Binder5.pdf
[2010/04/25 22:12:27 | 024,218,368 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Binder4.pdf
[2010/04/25 22:10:25 | 015,096,190 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Binder3.pdf
[2010/04/25 20:17:30 | 000,198,459 | ---- | C] () -- C:\Documents and Settings\William\Desktop\The Nature and Purpose of Numbers (Antonelli).pdf
[2010/04/24 00:55:21 | 000,838,442 | ---- | C] () -- C:\Documents and Settings\William\Desktop\The-Big-Book-of-BitTorrent.pdf
[2010/04/23 13:58:23 | 000,000,789 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Windows Media Player.lnk
[2010/04/23 04:07:03 | 000,019,048 | ---- | C] () -- C:\Documents and Settings\William\Desktop\PLATO.AND.A.PLATYPUS.WALK.INTO.A.BAR.-.Cathcart.&.Klein..Read.by.torrent
[2010/04/22 22:57:50 | 015,545,234 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Binder2.pdf
[2010/04/22 22:47:46 | 025,347,266 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Binder1.pdf
[2010/04/22 13:50:10 | 000,000,907 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Shortcut to Acrobat.exe.lnk
[2010/04/21 17:16:45 | 000,048,032 | ---- | C] () -- C:\Documents and Settings\William\Desktop\logicomix_is_a_comic_book_ about_math_and_logic_.htm
[2010/04/21 17:04:35 | 000,318,372 | ---- | C] () -- C:\Documents and Settings\William\Desktop\logicomix-review-january-2010 (Mancosu).pdf
[2010/04/21 10:15:53 | 000,042,668 | ---- | C] () -- C:\Documents and Settings\William\Desktop\lendman.pdf
[2010/04/21 02:33:25 | 000,057,685 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Cooking With Whole Wheat.pdf
[2010/04/21 02:31:08 | 000,048,012 | ---- | C] () -- C:\Documents and Settings\William\Desktop\The UX600 Cinema Series.pdf
[2010/04/21 02:27:26 | 000,045,922 | ---- | C] () -- C:\Documents and Settings\William\Desktop\Upgrade From XP to Windows 7 Without Losing Everything.pdf
[2010/04/19 23:41:26 | 000,181,169 | ---- | C] () -- C:\Documents and Settings\William\My Documents\bookmarks.html
[2010/03/21 17:36:44 | 000,000,049 | ---- | C] () -- C:\WINDOWS\CoolRead.ini
[2010/02/22 15:01:27 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll
[2010/01/04 02:57:03 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2010/01/04 02:57:03 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2010/01/04 02:52:10 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2009/10/02 17:26:01 | 000,000,075 | ---- | C] () -- C:\WINDOWS\winDecrypt.INI
[2009/07/17 18:36:35 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2009/05/08 13:38:20 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009/04/22 21:03:48 | 000,003,654 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sonyhcp.dll
[2009/04/19 14:37:51 | 000,002,139 | ---- | C] () -- C:\WINDOWS\ONLANG.INI
[2009/04/17 21:46:58 | 000,055,856 | R--- | C] () -- C:\WINDOWS\System32\vnetinst.dll
[2009/03/15 15:38:14 | 000,000,186 | ---- | C] () -- C:\WINDOWS\juno.ini
[2009/02/21 08:25:20 | 000,691,592 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.DLL
[2008/07/25 13:13:39 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/07/20 18:22:28 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2008/06/18 04:03:27 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2008/06/18 03:35:42 | 000,000,190 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/06/18 03:34:19 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2008/06/18 03:34:19 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2008/06/18 03:34:19 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2008/06/18 03:34:19 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2008/06/18 03:34:19 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2008/06/18 03:34:19 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2008/06/18 03:27:12 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/06/18 03:27:12 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/06/18 03:24:56 | 000,004,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSMAPIP.SYS
[2008/06/18 03:23:28 | 009,598,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2008/06/18 03:23:28 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2uvc.ini
[2008/06/18 03:22:08 | 000,004,442 | ---- | C] () -- C:\WINDOWS\System32\drivers\TPPWRIF.SYS
[2008/01/04 16:13:58 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\DEVMAN.DLL
[2007/07/26 23:37:40 | 000,025,269 | ---- | C] () -- C:\WINDOWS\System32\PROCDB.INI
[2007/07/26 23:37:29 | 000,000,380 | ---- | C] () -- C:\WINDOWS\System32\IPSCtrl.INI
[2007/02/27 18:48:38 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2007/02/27 17:29:32 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2007/01/16 08:12:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2006/04/30 00:31:51 | 000,004,670 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2006/04/30 00:22:10 | 000,000,882 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2005/02/17 11:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2005/02/17 11:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001/11/14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll

========== Custom Scans ==========


< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\*.exe /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2006/04/29 17:03:02 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2006/04/29 17:03:02 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2006/04/29 17:03:02 | 000,876,544 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.sys >
[2004/08/04 05:00:00 | 000,009,029 | ---- | M] () -- C:\WINDOWS\system32\ansi.sys
[2004/08/04 05:00:00 | 000,027,097 | ---- | M] () -- C:\WINDOWS\system32\country.sys
[2004/08/04 05:00:00 | 000,004,768 | ---- | M] () -- C:\WINDOWS\system32\himem.sys
[2004/08/04 05:00:00 | 000,042,809 | ---- | M] () -- C:\WINDOWS\system32\key01.sys
[2004/08/04 05:00:00 | 000,042,537 | ---- | M] () -- C:\WINDOWS\system32\keyboard.sys
[2008/04/13 11:39:50 | 000,005,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MSPCLOCK.sys
[2004/08/04 05:00:00 | 000,027,866 | ---- | M] () -- C:\WINDOWS\system32\ntdos.sys
[2004/08/04 05:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos404.sys
[2004/08/04 05:00:00 | 000,029,370 | ---- | M] () -- C:\WINDOWS\system32\ntdos411.sys
[2004/08/04 05:00:00 | 000,029,274 | ---- | M] () -- C:\WINDOWS\system32\ntdos412.sys
[2004/08/04 05:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos804.sys
[2004/08/04 05:00:00 | 000,033,840 | ---- | M] () -- C:\WINDOWS\system32\ntio.sys
[2004/08/04 05:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio404.sys
[2004/08/04 05:00:00 | 000,035,648 | ---- | M] () -- C:\WINDOWS\system32\ntio411.sys
[2004/08/04 05:00:00 | 000,035,424 | ---- | M] () -- C:\WINDOWS\system32\ntio412.sys
[2004/08/04 05:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio804.sys
[2008/04/13 11:44:59 | 000,017,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\watchdog.sys
[2009/08/14 06:21:25 | 001,850,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\win32k.sys

< %systemroot%\system32\drivers\*.dll >
[2008/04/13 17:11:48 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008/04/13 17:11:48 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008/04/13 17:11:48 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008/04/13 17:11:48 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008/04/13 17:11:48 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008/04/13 17:11:48 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008/04/13 17:11:48 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2008/04/13 17:11:50 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008/04/13 17:11:50 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008/04/13 17:11:50 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008/04/13 17:11:50 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008/04/13 17:11:50 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008/04/13 17:11:50 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2008/04/13 17:12:05 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2001/07/03 20:39:00 | 000,003,654 | ---- | M] () -- C:\WINDOWS\system32\drivers\Sonyhcp.dll
[2008/04/13 17:12:08 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll

< %systemroot%\system32\drivers\*.ini >

< %systemroot%\system32\drivers\*.exe >

< %SYSTEMDRIVE%\*.* >
[2010/05/14 23:04:50 | 000,033,596 | ---- | M] () -- C:\aaw7boot.log
[2006/04/30 00:13:35 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/01/09 15:38:30 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2006/04/30 00:13:35 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009/07/13 18:49:28 | 000,000,138 | -HS- | M] () -- C:\desktop.ini
[2010/01/04 03:02:55 | 000,001,927 | ---- | M] () -- C:\drivez.log
[2006/04/13 22:55:44 | 000,000,529 | ---- | M] () -- C:\dsbHSM.inf
[2010/03/28 00:46:58 | 000,000,311 | ---- | M] () -- C:\flpro_inst.log
[2008/08/25 09:15:57 | 000,000,049 | RHS- | M] () -- C:\HBEPGUID.TXT
[2010/05/19 17:35:31 | 2128,916,480 | -HS- | M] () -- C:\hiberfil.sys
[2006/04/30 00:13:35 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/05/19 17:16:30 | 000,000,644 | ---- | M] () -- C:\JavaRa.log
[2006/04/30 00:13:35 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2010/01/28 12:02:46 | 000,250,048 | RHS- | M] () -- C:\NTLDR
[2010/05/19 17:35:30 | 1048,576,000 | -HS- | M] () -- C:\pagefile.sys
[2010/05/16 18:30:06 | 000,001,168 | ---- | M] () -- C:\RootRepeal report 05-16-10 (18-30-06).txt
[2010/05/16 18:43:01 | 000,001,168 | ---- | M] () -- C:\RootRepeal report 05-16-10 (18-43-01).txt
[2010/01/04 02:40:47 | 000,000,093 | ---- | M] () -- C:\syslevel.lgl
[2010/05/14 01:33:22 | 000,015,694 | ---- | M] () -- C:\TDSSKiller.2.2.8.1_14.05.2010_01.33.22_log.txt
[2010/05/14 01:33:29 | 000,015,694 | ---- | M] () -- C:\TDSSKiller.2.2.8.1_14.05.2010_01.33.29_log.txt
[2010/05/14 01:39:40 | 000,015,694 | ---- | M] () -- C:\TDSSKiller.2.2.8.1_14.05.2010_01.39.39_log.txt
[2010/05/14 01:44:28 | 000,015,694 | ---- | M] () -- C:\TDSSKiller.2.2.8.1_14.05.2010_01.44.28_log.txt
[2010/01/09 12:42:00 | 000,000,192 | ---- | M] () -- C:\TPHKLOCK.TXT
[2010/04/25 00:07:05 | 000,486,540 | ---- | M] () -- C:\vcredist_x86.log

< %PROGRAMFILES%\*. >
[2010/02/22 23:24:44 | 000,000,000 | ---D | M] -- C:\Program Files\7-Zip
[2010/03/27 00:57:30 | 000,000,000 | ---D | M] -- C:\Program Files\activePDF
[2010/05/19 19:14:40 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2010/04/04 21:58:04 | 000,000,000 | ---D | M] -- C:\Program Files\AM-DeadLink
[2010/01/04 02:56:06 | 000,000,000 | ---D | M] -- C:\Program Files\Analog Devices
[2010/02/09 16:36:40 | 000,000,000 | ---D | M] -- C:\Program Files\AVG
[2010/02/22 23:27:30 | 000,000,000 | ---D | M] -- C:\Program Files\BillP Studios
[2010/03/23 20:21:03 | 000,000,000 | ---D | M] -- C:\Program Files\BitTorrent
[2010/04/26 21:45:35 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2010/05/10 12:21:04 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2006/04/29 17:09:57 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2010/05/02 21:02:57 | 000,000,000 | ---D | M] -- C:\Program Files\Conduit
[2010/01/04 02:56:45 | 000,000,000 | ---D | M] -- C:\Program Files\CONEXANT
[2010/04/25 00:08:05 | 000,000,000 | ---D | M] -- C:\Program Files\Corel
[2010/03/28 00:40:41 | 000,000,000 | ---D | M] -- C:\Program Files\CServe
[2010/05/09 12:41:29 | 000,000,000 | ---D | M] -- C:\Program Files\CubicExplorer_dev
[2010/03/23 17:37:13 | 000,000,000 | ---D | M] -- C:\Program Files\Desktops
[2010/01/04 02:55:50 | 000,000,000 | ---D | M] -- C:\Program Files\DIFX
[2010/03/16 16:50:41 | 000,000,000 | ---D | M] -- C:\Program Files\Digital Line Detect
[2010/03/27 14:37:30 | 000,000,000 | ---D | M] -- C:\Program Files\ElcomSoft
[2010/03/16 22:28:24 | 000,000,000 | ---D | M] -- C:\Program Files\ERUNT
[2010/03/28 14:26:30 | 000,000,000 | ---D | M] -- C:\Program Files\FileHippo.com
[2010/05/14 23:30:08 | 000,000,000 | ---D | M] -- C:\Program Files\GFI
[2010/05/08 04:33:30 | 000,000,000 | ---D | M] -- C:\Program Files\Glary Utilities
[2010/04/07 16:20:07 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2010/04/29 01:38:55 | 000,000,000 | ---D | M] -- C:\Program Files\HostsXpert
[2010/05/16 12:10:02 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2010/01/09 12:49:30 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2010/04/25 17:08:01 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2010/01/04 03:02:12 | 000,000,000 | ---D | M] -- C:\Program Files\InterVideo
[2010/02/22 19:00:46 | 000,000,000 | ---D | M] -- C:\Program Files\IObit
[2010/05/19 17:13:28 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2010/03/27 17:05:12 | 000,000,000 | ---D | M] -- C:\Program Files\JavaRa
[2010/02/22 15:58:03 | 000,000,000 | ---D | M] -- C:\Program Files\JRE
[2010/05/14 23:27:34 | 000,000,000 | ---D | M] -- C:\Program Files\Lavasoft
[2010/04/07 16:26:40 | 000,000,000 | ---D | M] -- C:\Program Files\Lenovo
[2010/01/04 03:04:43 | 000,000,000 | ---D | M] -- C:\Program Files\Lenovo Registration
[2010/05/16 12:10:03 | 000,000,000 | ---D | M] -- C:\Program Files\LizardTech
[2010/04/09 01:15:09 | 000,000,000 | ---D | M] -- C:\Program Files\LopeSoft
[2010/05/17 20:07:40 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/29 13:26:00 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger disabled
[2006/04/29 17:17:09 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2010/04/04 22:04:17 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2010/03/12 02:07:37 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2010/04/04 20:45:13 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2010/01/10 22:06:03 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2010/05/06 01:57:27 | 000,000,000 | ---D | M] -- C:\Program Files\MSECACHE
[2006/04/29 17:09:17 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2006/04/29 17:09:32 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2010/01/04 02:52:01 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2010/01/10 11:14:21 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 6.0
[2010/04/04 21:48:30 | 000,000,000 | ---D | M] -- C:\Program Files\Multimedia Center for Think Offerings
[2010/03/28 00:46:57 | 000,000,000 | ---D | M] -- C:\Program Files\Mythicsoft
[2010/01/28 12:04:25 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2010/03/16 16:50:32 | 000,000,000 | ---D | M] -- C:\Program Files\NetWaiting
[2010/04/07 23:19:17 | 000,000,000 | ---D | M] -- C:\Program Files\Notepad++
[2010/03/16 22:34:56 | 000,000,000 | ---D | M] -- C:\Program Files\NT Registry Optimizer
[2010/03/27 16:47:24 | 000,000,000 | ---D | M] -- C:\Program Files\Nvu
[2010/03/16 15:20:42 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2010/02/22 15:58:02 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice.org 3
[2010/05/11 13:41:27 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2010/03/23 17:26:38 | 000,000,000 | ---D | M] -- C:\Program Files\Page Defrag
[2010/03/16 16:52:07 | 000,000,000 | ---D | M] -- C:\Program Files\PC-Doctor
[2010/03/21 17:18:13 | 000,000,000 | ---D | M] -- C:\Program Files\PDF Technologies
[2010/04/25 00:00:18 | 000,000,000 | ---D | M] -- C:\Program Files\ProcessExplorer
[2010/04/25 00:03:28 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime Alternative
[2010/05/16 22:08:57 | 000,000,000 | ---D | M] -- C:\Program Files\Readerware
[2010/03/21 14:24:34 | 000,000,000 | ---D | M] -- C:\Program Files\Real Alternative
[2010/01/10 22:06:02 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2010/03/28 13:03:59 | 000,000,000 | ---D | M] -- C:\Program Files\RocketDock
[2010/03/23 17:30:05 | 000,000,000 | ---D | M] -- C:\Program Files\Rootkit Revealer
[2010/04/09 17:14:07 | 000,000,000 | ---D | M] -- C:\Program Files\shmnview
[2010/01/04 03:03:22 | 000,000,000 | ---D | M] -- C:\Program Files\Sonic
[2010/01/04 03:03:26 | 000,000,000 | ---D | M] -- C:\Program Files\Sonic Icons for Lenovo
[2010/03/28 00:13:19 | 000,000,000 | ---D | M] -- C:\Program Files\Stardock
[2010/02/09 16:12:24 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec
[2010/01/04 02:52:10 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2010/04/04 21:20:57 | 000,000,000 | ---D | M] -- C:\Program Files\TaskSwitchXP
[2010/01/04 03:08:05 | 000,000,000 | ---D | M] -- C:\Program Files\ThinkPad
[2010/01/04 03:04:31 | 000,000,000 | ---D | M] -- C:\Program Files\ThinkVantage
[2010/05/14 23:10:10 | 000,000,000 | ---D | M] -- C:\Program Files\Trend Micro
[2006/04/29 17:21:19 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2010/03/28 02:11:33 | 000,000,000 | ---D | M] -- C:\Program Files\Unlocker
[2010/04/21 23:18:41 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2010/04/26 22:18:18 | 000,000,000 | ---D | M] -- C:\Program Files\Viewpoint
[2010/03/27 15:13:29 | 000,000,000 | ---D | M] -- C:\Program Files\WinDirStat
[2010/05/14 04:10:38 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live Safety Center
[2010/03/20 21:51:44 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live Toolbar
[2010/03/19 17:45:06 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2010/03/19 17:45:06 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2010/01/28 12:04:22 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2006/04/29 17:11:34 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2006/04/29 17:17:09 | 000,000,000 | ---D | M] -- C:\Program Files\xerox

< %appdata%\*.* >
[2010/03/27 00:54:54 | 000,000,310 | ---- | M] () -- C:\Documents and Settings\William\Application Data\APUSet.xml
[2006/04/29 17:04:07 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\William\Application Data\desktop.ini


< MD5 for: AGP440.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:AGP440.sys
[2008/09/11 12:48:28 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\$NtServicePackUninstall$\sp3.cab:AGP440.sys
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 11:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 11:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\dllcache\agp440.sys
[2008/04/13 11:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004/08/03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

< MD5 for: ATAPI.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:atapi.sys
[2008/09/11 12:48:28 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\$NtServicePackUninstall$\sp3.cab:atapi.sys
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 11:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 11:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008/04/13 11:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: DISK.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:disk.sys
[2008/09/11 12:48:28 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\$NtServicePackUninstall$\sp3.cab:disk.sys
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
[2008/04/13 11:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
[2008/04/13 12:40:48 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\dllcache\disk.sys
[2008/04/13 12:40:48 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys

< MD5 for: EVENTLOG.DLL >
[2008/04/13 17:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 17:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008/04/13 17:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
[2004/08/04 05:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: IASTOR.SYS >
[2008/11/03 18:56:40 | 000,327,192 | ---- | M] (Intel Corporation) MD5=37769C28E1C6489C56E41DB7A32D58C5 -- C:\WINDOWS\system32\drivers\iaStor.sys
[2007/09/29 23:03:12 | 000,308,248 | ---- | M] (Intel Corporation) MD5=E5A0034847537EAEE3C00349D5C34C5F -- C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\iaStor.sys
[2007/02/11 21:36:54 | 000,277,784 | ---- | M] (Intel Corporation) MD5=FD7F9D74C2B35DBDA400804A3F5ED5D8 -- C:\drivers\other\iastor.sys
[2007/02/11 21:36:54 | 000,277,784 | ---- | M] (Intel Corporation) MD5=FD7F9D74C2B35DBDA400804A3F5ED5D8 -- C:\SWTOOLS\DRIVERS\IMSM\iastor.sys

< MD5 for: NETLOGON.DLL >
[2008/04/13 17:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 17:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008/04/13 17:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
[2009/02/06 11:46:09 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=6C476D33D82F1054849790181E8F7772 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2009/02/06 11:46:09 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=6C476D33D82F1054849790181E8F7772 -- C:\WINDOWS\$NtUninstallKB975467_0$\netlogon.dll
[2004/08/04 05:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\$NtUninstallKB968389_0$\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004/08/04 05:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008/04/13 17:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 17:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008/04/13 17:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: USBSTOR.SYS >
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\I386\sp2.cab:usbstor.sys
[2008/09/11 12:48:28 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\$NtServicePackUninstall$\sp3.cab:usbstor.sys
[2004/08/04 05:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbstor.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbstor.sys
[2010/01/28 12:01:07 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbstor.sys
[2008/04/13 11:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\ServicePackFiles\i386\usbstor.sys
[2008/04/13 12:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\system32\dllcache\usbstor.sys
[2008/04/13 12:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\system32\drivers\USBSTOR.SYS

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-05-11 20:42:55

========== Files - Unicode (All) ==========
[2010/05/08 18:52:00 | 000,333,744 | ---- | M] ()(C:\Documents and Settings\William\Desktop\?????2.mp3) -- C:\Documents and Settings\William\Desktop\أسامة2.mp3
[2010/05/06 03:14:07 | 000,333,744 | ---- | C] ()(C:\Documents and Settings\William\Desktop\?????2.mp3) -- C:\Documents and Settings\William\Desktop\أسامة2.mp3
< End of report >

Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  

Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.

Post the contents of the MBAM Log.

Thanks. Here is the log. I'm in the clear~now, right?

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4129

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

5/22/2010 12:31:22 AM
mbam-log-2010-05-22 (00-31-22).txt

Scan type: Quick scan
Objects scanned: 132361
Time elapsed: 4 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\Software\M5T8QL3YW3 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_Windows_MSI (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Windows MSI (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\QZAIB7KITK (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 93.188.165.165,93.188.166.175 -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Hello.

There is a lot of .pdf files on your Desktop, do you know what they are? did you put them there? just checking really, that many does seem a little suspicious to me, but you may have put them there for your own reasons.

I download data file, mostly pdf's, to my desktop. Every once in a great while I "clean house" and move them to appropriate folders. Thanks again for your help.
W. Greenberg

Run ESET Online Scan
Please do an online scan with ESET Online Scanner. Please use Internet Explorer as it uses ActiveX.

• Check (tick) this box: YES, I accept the Terms of Use.
  
• Click on the Start button next to it.
  
• When prompted to run ActiveX. click Yes.
  
• You will be asked to install an ActiveX. Click Install.
  
• Once installed, the scanner will be initialized.
  
• After the scanner is initialized, click Start.
  
• Check (tick) Remove found threats box.
  
• Check (tick) Scan unwanted applications.
  
• Click on Scan.
  
• It will start scanning. Please be patient.
  
• Once the scan is done, the log will be saved here: C:\Program Files\esetonlinescanner\log.txt.
  

Did the scan: everything clean. Thanks, thanks, thanks!