CPU freezing up, crashing

I lent my laptop to my brother while I was away on vacation so he could work on the go. I came back and got it only to find it not working very well, often freezing up and crashing. He said he downloaded some torrents, which set of a warning flag for me; I don't really trust torrents. It works fine in safe mode and safe mode with networking, and occasionally in the regular mode until it eventually crashes. The system restore, what I usually use doesnt go far enough back to get away from the problem. I have malware bytes and avira free.

Hello.

Download OTL by OldTimer to your Desktop.

• Close all windows and double click OTL.exe
  
• Click Run Scan and let the program run uninterrupted
  
• It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  
• You may need to use two posts to get it all.
  

OTL logfile created on: 1/11/2011 6:48:45 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Wes\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 54.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 283.40 Gb Total Space | 191.33 Gb Free Space | 67.51% Space Free | Partition Type: NTFS
Drive E: | 14.65 Gb Total Space | 6.07 Gb Free Space | 41.41% Space Free | Partition Type: NTFS
Drive F: | 7.90 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: WES-PC | User Name: Wes | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/01/11 18:46:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Wes\Downloads\OTL.exe
PRC - [2010/12/08 18:28:23 | 000,991,800 | ---- | M] (Google Inc.) -- C:\Users\Wes\AppData\Local\Google\Chrome\Application\chrome.exe
PRC - [2010/12/08 11:26:58 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/11/04 12:40:10 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/11/04 12:40:10 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2010/09/21 10:19:44 | 002,331,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgfws9.exe
PRC - [2010/09/01 01:39:18 | 001,164,584 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2008/12/18 13:05:28 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2008/06/03 15:54:56 | 000,446,635 | ---- | M] (Creative Technology Ltd.) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell.exe
PRC - [2008/05/23 14:06:08 | 000,128,296 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2008/05/07 17:41:14 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/05/07 17:41:12 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe


========== Modules (SafeList) ==========

MOD - [2011/01/11 18:46:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Wes\Downloads\OTL.exe
MOD - [2010/08/31 10:39:57 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2008/12/22 05:35:16 | 000,032,768 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\WLTRYSVC.EXE -- (wltrysvc)
SRV:64bit: - [2008/12/18 13:05:28 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV:64bit: - [2008/12/14 23:13:46 | 000,281,600 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_cce24a4c\STacSV64.exe -- (STacSV)
SRV:64bit: - [2008/12/14 23:13:30 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_cce24a4c\AESTSr64.exe -- (AESTFilters)
SRV:64bit: - [2008/01/20 21:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2006/11/02 06:16:05 | 000,046,592 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\rundll32.exe -- (yksvc)
SRV - [2010/12/08 11:26:58 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/11/04 12:40:10 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/09/21 10:19:44 | 002,331,544 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgfws9.exe -- (avgfws9)
SRV - [2010/09/21 02:33:44 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2010/09/21 02:33:26 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2010/09/21 02:33:00 | 005,897,808 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2008/11/03 18:15:32 | 000,242,424 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent\Dell Games\Dell Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2008/07/27 13:03:13 | 000,069,632 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/05/07 17:41:14 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)


========== Driver Services (SafeList) ==========

DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ipinip.sys -- (IpInIp)
DRV:64bit: - [2010/11/25 17:33:14 | 000,083,120 | ---- | M] () [File_System | Auto | Running] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2010/09/21 02:35:45 | 000,056,008 | ---- | M] () [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\avgrkx64.sys -- (AvgRkx64)
DRV:64bit: - [2010/09/21 02:35:45 | 000,027,216 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\AVGIDSva.sys -- (AVGIDSErHrvta)
DRV:64bit: - [2010/09/21 02:35:44 | 000,317,520 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avgtdia.sys -- (AvgTdiA)
DRV:64bit: - [2010/09/21 02:35:39 | 000,269,904 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avgldx64.sys -- (AvgLdx64)
DRV:64bit: - [2010/09/21 02:35:38 | 000,035,536 | ---- | M] () [File_System | System | Running] -- C:\Windows\SysNative\Drivers\avgmfx64.sys -- (AvgMfx64)
DRV:64bit: - [2010/09/21 02:32:36 | 000,029,976 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avgfwd6a.sys -- (Avgfwfd)
DRV:64bit: - [2010/08/11 23:07:46 | 000,055,856 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010/03/02 12:35:01 | 000,116,568 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb)
DRV:64bit: - [2009/01/16 10:00:32 | 010,275,296 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\igdkmd64.sys -- (igfx)
DRV:64bit: - [2008/12/22 05:34:48 | 000,022,520 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCM42RLY.sys -- (BCM42RLY)
DRV:64bit: - [2008/12/17 04:22:04 | 001,526,776 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\bcmwl664.sys -- (BCM43XX)
DRV:64bit: - [2008/12/14 23:13:56 | 000,472,064 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\stwrt64.sys -- (STHDA)
DRV:64bit: - [2008/12/08 00:32:48 | 000,068,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTSTOR64.SYS -- (RTSTOR)
DRV:64bit: - [2008/09/04 00:29:22 | 000,199,728 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2008/09/03 03:44:22 | 000,307,456 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA009Vid.sys -- (OA009Vid)
DRV:64bit: - [2008/09/03 03:44:22 | 000,168,864 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA009Ufd.sys -- (OA009Ufd)
DRV:64bit: - [2008/09/01 05:19:24 | 000,392,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
DRV:64bit: - [2008/09/01 05:15:58 | 000,395,288 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iastor.sys -- (iaStor)
DRV:64bit: - [2008/01/20 21:46:55 | 000,317,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\e1e6032e.sys -- (e1express) Intel(R)
DRV:64bit: - [2006/11/02 02:48:50 | 002,488,320 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (R300)
DRV:64bit: - [2006/09/18 16:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\Wbem\ntfs.mof -- (Ntfs)
DRV - [2010/09/21 02:33:03 | 000,132,688 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista64\AVGIDSDriver.sys -- (AVGIDSDrivervta)
DRV - [2010/09/21 02:33:02 | 000,035,920 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista64\AVGIDSFilter.sys -- (AVGIDSFiltervta)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



O1 HOSTS File: ([2006/09/18 16:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Windows\SysNative\WLTRAY.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe ()
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe ()
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [MFARestart] C:\ProgramData\MFAData\pack\avgrunasx.exe ()
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - Startup: C:\Users\Wes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files (x86)\Dell\DellDock\DellDock.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.68.223.10 192.68.223.11
O18:64bit: - Protocol\Handler\cozi {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\cozi {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - C:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll (Cozi Group, Inc.)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll ()
O24 - Desktop WallPaper: C:\Users\Wes\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Wes\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{95b37121-1853-11e0-9080-0023ae329a32}\Shell - "" = AutoRun
O33 - MountPoints2\{95b37121-1853-11e0-9080-0023ae329a32}\Shell\AutoRun\command - "" = D:\FalloutLauncher.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/01/10 23:22:51 | 000,000,000 | -HSD | C] -- C:\found.001
[2011/01/09 13:07:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2011/01/09 13:06:32 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2011/01/09 13:06:32 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
[2011/01/05 03:46:39 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Local\Oblivion
[2011/01/05 02:23:42 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\WinRAR
[2011/01/05 02:23:38 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2011/01/05 01:18:11 | 000,000,000 | ---D | C] -- C:\Users\Wes\Documents\Games for Windows - LIVE Demos
[2011/01/05 01:14:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2011/01/05 01:07:48 | 000,000,000 | -H-D | C] -- C:\Windows\msdownld.tmp
[2011/01/05 01:07:40 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2011/01/05 00:43:11 | 000,993,816 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igxpun.exe
[2011/01/05 00:42:58 | 000,059,392 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\oemdspif.dll
[2011/01/05 00:42:53 | 000,210,432 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxdv32.dll
[2011/01/05 00:42:52 | 004,112,384 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\ig4icd32.dll
[2011/01/05 00:42:52 | 002,576,384 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igd10umd32.dll
[2011/01/05 00:42:51 | 002,674,688 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\ig4dev32.dll
[2011/01/05 00:32:37 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell Inc
[2011/01/04 21:44:33 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Local\Fallout3
[2011/01/04 21:20:11 | 000,000,000 | ---D | C] -- C:\Users\Wes\Documents\My Games
[2011/01/04 21:20:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bethesda Softworks
[2011/01/04 21:20:08 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2011/01/04 21:20:08 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2011/01/04 21:20:07 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2011/01/04 21:20:07 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2011/01/04 21:20:06 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2011/01/04 21:20:06 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2011/01/04 21:20:05 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2011/01/04 21:20:04 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2011/01/04 21:20:03 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2011/01/04 21:20:03 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2011/01/04 21:20:02 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2011/01/04 21:20:02 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2011/01/04 21:20:01 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2011/01/04 21:16:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2011/01/04 21:12:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Roxio
[2011/01/04 21:12:16 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\Roxio
[2011/01/04 19:55:43 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\uTorrent
[2011/01/04 19:54:50 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\DAEMON Tools Pro
[2011/01/04 19:54:50 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Pro
[2010/12/30 12:55:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2010/12/30 12:55:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010/12/28 17:10:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sports Mogul
[2010/12/28 17:10:46 | 000,000,000 | ---D | C] -- C:\Sports Mogul
[2010/12/28 16:19:43 | 000,203,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\richtx32.ocx
[2010/12/28 16:19:43 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msstdfmt.dll
[2010/12/28 16:19:43 | 000,067,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysinfo.ocx
[2010/12/28 16:19:43 | 000,000,000 | ---D | C] -- C:\UFL
[2010/12/28 16:00:49 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\Hrsim
[2010/12/19 16:02:16 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\Reallusion
[2010/12/19 12:38:31 | 000,000,000 | -HSD | C] -- C:\found.000
[2010/12/19 03:00:48 | 000,000,000 | ---D | C] -- C:\d379c1a0be29e4b205043d51
[2010/12/19 03:00:31 | 000,000,000 | ---D | C] -- C:\Windows\CheckSur
[2010/12/18 03:02:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2010/12/16 13:54:52 | 000,476,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010/12/16 13:54:52 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieencode.dll
[2010/12/16 13:54:51 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010/12/16 13:54:51 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010/12/16 13:54:50 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010/12/16 13:54:49 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2010/12/16 13:54:44 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2010/12/16 13:54:43 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2010/12/16 13:53:24 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2010/12/16 13:53:23 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2010/12/16 13:52:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2010/12/15 21:51:21 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2010/12/15 21:51:21 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2010/12/15 21:51:20 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2010/12/13 21:53:53 | 000,000,000 | ---D | C] -- C:\Users\Wes\AppData\Roaming\Template
[27 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/01/11 18:20:00 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3123855604-3949936087-2938967921-1000UA.job
[2011/01/11 18:00:00 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/01/11 17:34:01 | 000,703,388 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/01/11 17:34:01 | 000,603,394 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/01/11 17:34:01 | 000,103,508 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/01/11 17:29:00 | 000,000,888 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/01/11 17:28:49 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/01/11 17:28:49 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/01/11 17:28:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/01/11 17:28:36 | 4253,405,184 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/10 13:24:24 | 000,001,356 | ---- | M] () -- C:\Users\Wes\AppData\Local\d3d9caps.dat
[2011/01/07 22:11:47 | 000,011,776 | ---- | M] () -- C:\Users\Wes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/03 04:20:00 | 000,000,848 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3123855604-3949936087-2938967921-1000Core.job
[2010/12/28 20:41:20 | 000,281,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010/12/28 17:51:16 | 000,001,662 | ---- | M] () -- C:\Users\Public\Desktop\Football Mogul 2011.lnk
[2010/12/16 19:20:56 | 000,002,034 | ---- | M] () -- C:\Users\Wes\Desktop\Google Chrome.lnk
[2010/12/16 19:20:56 | 000,001,996 | ---- | M] () -- C:\Users\Wes\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/12/13 21:53:57 | 000,000,132 | ---- | M] () -- C:\Users\Wes\AppData\Roaming\wklnhst.dat
[2010/12/12 19:19:36 | 001,577,100 | ---- | M] () -- C:\Users\Wes\Desktop\Movie.wmv
[27 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/01/11 14:11:05 | 4253,405,184 | -HS- | C] () -- C:\hiberfil.sys
[2011/01/05 00:42:54 | 001,305,600 | ---- | C] () -- C:\Windows\SysNative\igfxCoIn_v1637.dll
[2011/01/05 00:42:54 | 000,982,196 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin
[2011/01/05 00:42:54 | 000,982,196 | ---- | C] () -- C:\Windows\SysNative\igkrng500.bin
[2011/01/05 00:42:54 | 000,252,416 | ---- | C] () -- C:\Windows\SysNative\igfxrell.lrc
[2011/01/05 00:42:54 | 000,245,760 | ---- | C] () -- C:\Windows\SysNative\igfxrita.lrc
[2011/01/05 00:42:54 | 000,245,248 | ---- | C] () -- C:\Windows\SysNative\igfxrdeu.lrc
[2011/01/05 00:42:54 | 000,244,736 | ---- | C] () -- C:\Windows\SysNative\igfxrfra.lrc
[2011/01/05 00:42:54 | 000,244,224 | ---- | C] () -- C:\Windows\SysNative\igfxresp.lrc
[2011/01/05 00:42:54 | 000,240,640 | ---- | C] () -- C:\Windows\SysNative\igfxrnld.lrc
[2011/01/05 00:42:54 | 000,236,032 | ---- | C] () -- C:\Windows\SysNative\igfxrptg.lrc
[2011/01/05 00:42:54 | 000,232,960 | ---- | C] () -- C:\Windows\SysNative\igfxrrus.lrc
[2011/01/05 00:42:54 | 000,230,400 | ---- | C] () -- C:\Windows\SysNative\igfxrptb.lrc
[2011/01/05 00:42:54 | 000,229,376 | ---- | C] () -- C:\Windows\SysNative\igfxrhun.lrc
[2011/01/05 00:42:54 | 000,228,864 | ---- | C] () -- C:\Windows\SysNative\igfxrplk.lrc
[2011/01/05 00:42:54 | 000,224,256 | ---- | C] () -- C:\Windows\SysNative\igfxrsve.lrc
[2011/01/05 00:42:54 | 000,223,744 | ---- | C] () -- C:\Windows\SysNative\igfxrsky.lrc
[2011/01/05 00:42:54 | 000,223,744 | ---- | C] () -- C:\Windows\SysNative\igfxrcsy.lrc
[2011/01/05 00:42:54 | 000,222,208 | ---- | C] () -- C:\Windows\SysNative\igfxrfin.lrc
[2011/01/05 00:42:54 | 000,222,208 | ---- | C] () -- C:\Windows\SysNative\igfxrdan.lrc
[2011/01/05 00:42:54 | 000,221,184 | ---- | C] () -- C:\Windows\SysNative\igfxrnor.lrc
[2011/01/05 00:42:54 | 000,220,672 | ---- | C] () -- C:\Windows\SysNative\igfxrtrk.lrc
[2011/01/05 00:42:54 | 000,218,624 | ---- | C] () -- C:\Windows\SysNative\igfxrslv.lrc
[2011/01/05 00:42:54 | 000,204,288 | ---- | C] () -- C:\Windows\SysNative\igfxrtha.lrc
[2011/01/05 00:42:54 | 000,194,048 | ---- | C] () -- C:\Windows\SysNative\igfxrara.lrc
[2011/01/05 00:42:54 | 000,191,488 | ---- | C] () -- C:\Windows\SysNative\igfxrheb.lrc
[2011/01/05 00:42:54 | 000,189,464 | ---- | C] () -- C:\Windows\SysNative\igfxext.exe
[2011/01/05 00:42:54 | 000,147,968 | ---- | C] () -- C:\Windows\SysNative\igfxrjpn.lrc
[2011/01/05 00:42:54 | 000,146,944 | ---- | C] () -- C:\Windows\SysNative\igfxrkor.lrc
[2011/01/05 00:42:54 | 000,120,832 | ---- | C] () -- C:\Windows\SysNative\igfxrcht.lrc
[2011/01/05 00:42:54 | 000,119,808 | ---- | C] () -- C:\Windows\SysNative\igfxrchs.lrc
[2011/01/05 00:42:54 | 000,028,160 | ---- | C] () -- C:\Windows\SysNative\igfxexps.dll
[2011/01/05 00:42:54 | 000,003,600 | ---- | C] () -- C:\Windows\SysNative\iglhxs64.vp
[2011/01/05 00:42:53 | 000,822,296 | ---- | C] () -- C:\Windows\SysNative\igfxcfg.exe
[2011/01/05 00:42:53 | 000,139,824 | ---- | C] () -- C:\Windows\SysWow64\igfcg500.bin
[2011/01/05 00:42:53 | 000,139,824 | ---- | C] () -- C:\Windows\SysNative\igfcg500.bin
[2011/01/05 00:42:53 | 000,117,760 | ---- | C] () -- C:\Windows\SysNative\igfxdo.dll
[2011/01/05 00:42:53 | 000,100,864 | ---- | C] () -- C:\Windows\SysNative\igfxcpl.cpl
[2011/01/05 00:42:53 | 000,097,448 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin
[2011/01/05 00:42:53 | 000,097,448 | ---- | C] () -- C:\Windows\SysNative\igfcg500m.bin
[2011/01/05 00:42:52 | 010,275,296 | ---- | C] () -- C:\Windows\SysNative\drivers\igdkmd64.sys
[2011/01/05 00:42:52 | 006,442,496 | ---- | C] () -- C:\Windows\SysNative\ig4icd64.dll
[2011/01/05 00:42:52 | 004,512,256 | ---- | C] () -- C:\Windows\SysNative\ig4dev64.dll
[2011/01/05 00:42:52 | 003,604,480 | ---- | C] () -- C:\Windows\SysNative\igd10umd64.dll
[2011/01/05 00:42:52 | 000,417,344 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin
[2011/01/05 00:42:52 | 000,417,344 | ---- | C] () -- C:\Windows\SysNative\igcompkrng500.bin
[2011/01/05 00:42:51 | 000,106,008 | ---- | C] () -- C:\Windows\SysNative\difx64.exe
[2011/01/04 21:20:08 | 000,511,496 | ---- | C] () -- C:\Windows\SysNative\XAudio2_1.dll
[2011/01/04 21:20:08 | 000,068,104 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_0.dll
[2011/01/04 21:20:07 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_1.dll
[2011/01/04 21:20:07 | 000,028,168 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_4.dll
[2011/01/04 21:20:06 | 001,941,528 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_38.dll
[2011/01/04 21:20:06 | 000,540,688 | ---- | C] () -- C:\Windows\SysNative\d3dx10_38.dll
[2011/01/04 21:20:05 | 004,991,496 | ---- | C] () -- C:\Windows\SysNative\D3DX9_38.dll
[2011/01/04 21:20:04 | 000,489,480 | ---- | C] () -- C:\Windows\SysNative\XAudio2_0.dll
[2011/01/04 21:20:03 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_0.dll
[2011/01/04 21:20:03 | 000,028,168 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_3.dll
[2011/01/04 21:20:02 | 001,860,120 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_37.dll
[2011/01/04 21:20:02 | 000,529,424 | ---- | C] () -- C:\Windows\SysNative\d3dx10_37.dll
[2011/01/04 21:20:01 | 004,910,088 | ---- | C] () -- C:\Windows\SysNative\D3DX9_37.dll
[2011/01/04 21:17:51 | 000,028,081 | ---- | C] () -- C:\Users\Wes\AppData\Local\dd_depcheckdotnetfx30.txt
[2011/01/04 21:17:47 | 000,031,786 | ---- | C] () -- C:\Users\Wes\AppData\Local\dd_dotnetfx3install.txt
[2011/01/04 21:17:47 | 000,001,578 | ---- | C] () -- C:\Users\Wes\AppData\Local\uxeventlog.txt
[2011/01/04 21:17:47 | 000,000,604 | ---- | C] () -- C:\Users\Wes\AppData\Local\dd_dotnetfx3error.txt
[2010/12/30 12:55:35 | 000,000,892 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/12/30 12:55:34 | 000,000,888 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/12/28 17:51:16 | 000,001,662 | ---- | C] () -- C:\Users\Public\Desktop\Football Mogul 2011.lnk
[2010/12/16 13:55:35 | 002,751,488 | ---- | C] () -- C:\Windows\SysNative\win32k.sys
[2010/12/16 13:54:34 | 007,015,424 | ---- | C] () -- C:\Windows\SysNative\ieframe.dll
[2010/12/16 13:54:32 | 000,375,296 | ---- | C] () -- C:\Windows\SysNative\iertutil.dll
[2010/12/16 13:54:31 | 000,208,896 | ---- | C] () -- C:\Windows\SysNative\occache.dll
[2010/12/16 13:54:27 | 005,693,440 | ---- | C] () -- C:\Windows\SysNative\mshtml.dll
[2010/12/16 13:54:27 | 001,383,424 | ---- | C] () -- C:\Windows\SysNative\mshtml.tlb
[2010/12/16 13:54:26 | 000,758,784 | ---- | C] () -- C:\Windows\SysNative\mshtmled.dll
[2010/12/16 13:54:26 | 000,485,376 | ---- | C] () -- C:\Windows\SysNative\html.iec
[2010/12/16 13:54:26 | 000,086,528 | ---- | C] () -- C:\Windows\SysNative\ieencode.dll
[2010/12/16 13:54:25 | 000,590,848 | ---- | C] () -- C:\Windows\SysNative\msfeeds.dll
[2010/12/16 13:54:25 | 000,422,400 | ---- | C] () -- C:\Windows\SysNative\ieapfltr.dll
[2010/12/16 13:54:25 | 000,249,856 | ---- | C] () -- C:\Windows\SysNative\iepeers.dll
[2010/12/16 13:54:24 | 000,267,776 | ---- | C] () -- C:\Windows\SysNative\ieaksie.dll
[2010/12/16 13:54:23 | 000,480,256 | ---- | C] () -- C:\Windows\SysNative\iedkcs32.dll
[2010/12/16 13:54:22 | 001,032,704 | ---- | C] () -- C:\Windows\SysNative\wininet.dll
[2010/12/16 13:54:21 | 001,129,984 | ---- | C] () -- C:\Windows\SysNative\mstime.dll
[2010/12/16 13:54:21 | 000,032,256 | ---- | C] () -- C:\Windows\SysNative\jsproxy.dll
[2010/12/16 13:54:20 | 001,426,944 | ---- | C] () -- C:\Windows\SysNative\urlmon.dll
[2010/12/16 13:53:24 | 000,854,528 | ---- | C] () -- C:\Windows\SysNative\schedsvc.dll
[2010/12/16 13:53:24 | 000,655,872 | ---- | C] () -- C:\Windows\SysNative\taskschd.dll
[2010/12/16 13:53:24 | 000,499,712 | ---- | C] () -- C:\Windows\SysNative\wmicmiplugin.dll
[2010/12/16 13:53:23 | 000,410,112 | ---- | C] () -- C:\Windows\SysNative\taskcomp.dll
[2010/12/16 13:53:23 | 000,267,776 | ---- | C] () -- C:\Windows\SysNative\taskeng.exe
[2010/12/16 13:53:08 | 000,002,048 | ---- | C] () -- C:\Windows\SysNative\tzres.dll
[2010/12/16 13:52:37 | 001,794,560 | ---- | C] () -- C:\Windows\SysNative\msxml6.dll
[2010/12/15 21:51:21 | 000,367,104 | ---- | C] () -- C:\Windows\SysNative\atmfd.dll
[2010/12/15 21:51:21 | 000,048,128 | ---- | C] () -- C:\Windows\SysNative\atmlib.dll
[2010/12/15 21:51:20 | 000,096,256 | ---- | C] () -- C:\Windows\SysNative\fontsub.dll
[2010/12/15 21:51:15 | 000,087,552 | ---- | C] () -- C:\Windows\SysNative\consent.exe
[2010/12/13 21:53:52 | 000,000,132 | ---- | C] () -- C:\Users\Wes\AppData\Roaming\wklnhst.dat
[2010/12/12 19:19:30 | 001,577,100 | ---- | C] () -- C:\Users\Wes\Desktop\Movie.wmv
[2010/10/24 21:01:04 | 000,001,356 | ---- | C] () -- C:\Users\Wes\AppData\Local\d3d9caps.dat
[2010/10/14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010/09/27 20:06:27 | 000,011,776 | ---- | C] () -- C:\Users\Wes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/01/20 21:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2008/01/20 21:49:49 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

========== Files - Unicode (All) ==========
[2010/09/22 09:28:16 | 000,000,036 | ---- | M] ()(C:\Windows\SysWow64\??) -- C:\Windows\SysWow64\䂨̀
[2010/09/22 09:28:16 | 000,000,036 | ---- | C] ()(C:\Windows\SysWow64\??) -- C:\Windows\SysWow64\䂨̀

< End of report >

OTL Extras logfile created on: 1/11/2011 6:48:45 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Wes\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 54.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 283.40 Gb Total Space | 191.33 Gb Free Space | 67.51% Space Free | Partition Type: NTFS
Drive E: | 14.65 Gb Total Space | 6.07 Gb Free Space | 41.41% Space Free | Partition Type: NTFS
Drive F: | 7.90 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: WES-PC | User Name: Wes | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] -- C:\Users\Wes\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" ()
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l ()
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{3E60D824-9373-4529-9961-A7CE08565214}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C0C6FE91-910F-475D-AA14-719C43499832}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0793D8F1-98E9-43AE-91EB-B216CAC84D7A}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{0C3DB5CB-FC5E-44DF-BE23-357A8ECB56DB}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{1CE1B0A8-8618-4CD1-97DF-2E0EF5CD89A0}" = dir=in | app=c:\program files (x86)\avg\avg9\avgnsa.exe |
"{42134786-FDE6-48C6-9710-BA96A9DC4208}" = dir=in | app=c:\program files (x86)\avg\avg9\avgdiagex.exe |
"{45542A76-28A3-46B0-A1ED-7E1A4098493D}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe |
"{4C34E570-9991-4BF3-8853-8A45819DDCD9}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe |
"{5D2A6DE4-8370-4C53-ADED-0BF57598D0A4}" = dir=in | app=c:\program files (x86)\avg\avg9\avgam.exe |
"{860C7E06-74E2-4E4C-8E2C-287E4B974136}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe |
"{BF3250CE-592B-4C5E-A6A6-893171F93AE2}" = protocol=17 | dir=in | app=c:\program files (x86)\dell video chat\dellvideochat.exe |
"{C9D9D2B4-97BB-4779-ACED-6602822A8C8A}" = dir=in | app=c:\program files (x86)\avg\avg9\avgemc.exe |
"{E5AC5D9F-CA35-4391-9351-349C0C672A53}" = protocol=6 | dir=in | app=c:\program files (x86)\dell video chat\dellvideochat.exe |
"{ED1467FD-DBD3-46A0-81F9-8E2A273FE7F4}" = dir=in | app=c:\program files (x86)\avg\avg9\avgupd.exe |
"TCP Query User{1DEFB7EF-3AE7-4E4E-B1F8-1EF13B3AC2B8}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{0A5F0E0E-2AEE-4B26-A04A-32E1D31967A3}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6DA2E7DC-BC1E-4595-83A9-99BAD907AA1C}" = AVG 2011
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"Broadcom 802.11 Application" = Dell Wireless WLAN Card Utility
"Creative OA009" = Integrated Webcam Driver (1.00.02.0825)
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{020D8396-D6D9-4B53-A9A1-83C47E2E27AA}" = Windows Live Call
"{053C30EA-D4C6-47A0-8537-8D231D9BE873}" = DELL0703
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 21
"{299CF645-48C7-4FA1-8BCD-5CE200CF180D}" = Microsoft Search Enhancement Pack
"{2B4C7E1E-E446-4740-ADB5-9842E742EE8A}" = Windows Live Toolbar
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{63C1109E-D977-49ED-BCE3-D00D0BF187D6}" = Windows Live Mail
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}" = Windows Live Writer
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{7456BBA3-642F-4E59-9F89-7639977D7C39}" = Cozi
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{79211375-1316-45BB-B598-AEF886398855}" = Prison Tycoon 4
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{D9D754A1-EAC5-406C-A28B-C49B1E846711}" = Windows Live Essentials
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F47C37A4-7189-430A-B81D-739FF8A7A554}" = Consumer In-Home Service Agreement
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{F73A5B18-EB75-4B2C-B32D-9457576E2417}" = Windows Live Photo Gallery
"{FB4F9000-04FC-11E0-85D2-001AA037B01E}" = Google Earth Plug-in
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"{FDD810CA-D5E3-40E9-AB7B-36440B0D41EF}" = Windows Live Sync
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"AVG9Uninstall" = AVG 9.0
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Dell Video Chat" = Dell Video Chat
"Dell Webcam Central" = Dell Webcam Central
"DivX Setup.divx.com" = DivX Setup
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"The College Years Demo" = The College Years Demo
"WildTangent dell Master Uninstall" = WildTangent Games
"WinLiveSuite_Wave3" = Windows Live Essentials

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"f031ef6ac137efc5" = Dell Driver Download Manager
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/7/2011 10:49:51 PM | Computer Name = Wes-PC | Source = WinMgmt | ID = 10
Description =

Error - 1/7/2011 10:51:20 PM | Computer Name = Wes-PC | Source = Application Error | ID = 1000
Description = Faulting application igfxsrvc.exe, version 7.14.10.1576, time stamp
0x48eb8411, faulting module RPCRT4.dll, version 6.0.6001.18247, time stamp 0x49f06a9a,
exception code 0xc0000005, fault offset 0x000000000002e822, process id 0xe60, application
start time 0x01cbaededda279f0.

Error - 1/7/2011 10:52:39 PM | Computer Name = Wes-PC | Source = Application Error | ID = 1000
Description = Faulting application quickset.exe, version 9.6.21.0, time stamp 0x4c0f1b35,
faulting module quickset.exe, version 9.6.21.0, time stamp 0x4c0f1b35, exception
code 0xc0000005, fault offset 0x00000000000102d0, process id 0xdd8, application
start time 0x01cbaedef84c57d0.

Error - 1/7/2011 10:58:10 PM | Computer Name = Wes-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 1/7/2011 10:58:10 PM | Computer Name = Wes-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 1/7/2011 11:03:29 PM | Computer Name = Wes-PC | Source = EventSystem | ID = 4621
Description =

Error - 1/7/2011 11:05:53 PM | Computer Name = Wes-PC | Source = Application Error | ID = 1000
Description = Faulting application igfxsrvc.exe, version 7.14.10.1576, time stamp
0x48eb8411, faulting module RPCRT4.dll, version 6.0.6001.18247, time stamp 0x49f06a9a,
exception code 0xc0000005, fault offset 0x000000000002e822, process id 0xd00, application
start time 0x01cbaee0f068cb2e.

Error - 1/7/2011 11:06:31 PM | Computer Name = Wes-PC | Source = WinMgmt | ID = 10
Description =

Error - 1/8/2011 2:05:28 AM | Computer Name = Wes-PC | Source = WinMgmt | ID = 10
Description =

Error - 1/8/2011 2:07:56 AM | Computer Name = Wes-PC | Source = EventSystem | ID = 4621
Description =

[ Broadcom Wireless LAN Events ]
Error - 12/16/2010 2:22:14 PM | Computer Name = Wes-PC | Source = WLAN-Tray | ID = 0
Description = 13:22:12, Thu, Dec 16, 10 Error - Unable to gain access to user store


Error - 12/21/2010 1:00:20 AM | Computer Name = Wes-PC | Source = WLAN-Tray | ID = 0
Description = 00:00:19, Tue, Dec 21, 10 Error - Unable to gain access to user store


Error - 1/5/2011 9:44:40 PM | Computer Name = Wes-PC | Source = WLAN-Tray | ID = 0
Description = 20:44:39, Wed, Jan 05, 11 Error - Unable to gain access to user store


Error - 1/5/2011 11:13:41 PM | Computer Name = Wes-PC | Source = WLAN-Tray | ID = 0
Description = 22:13:41, Wed, Jan 05, 11 Error - Unable to gain access to user store


Error - 1/7/2011 10:43:19 PM | Computer Name = Wes-PC | Source = WLAN-Tray | ID = 0
Description = 21:43:11, Fri, Jan 07, 11 Error - Unable to gain access to user store


[ System Events ]
Error - 10/24/2010 1:44:35 PM | Computer Name = Wes-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 10/24/2010 1:45:22 PM | Computer Name = Wes-PC | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 00242C7177BD. The following
error occurred: %%121. Your computer will continue to try and obtain an address
on its own from the network address (DHCP) server.

Error - 10/24/2010 1:49:07 PM | Computer Name = Wes-PC | Source = Dhcp | ID = 1001
Description = Your computer was not assigned an address from the network (by the
DHCP Server) for the Network Card with network address 00242C7177BD. The following
error occurred: %%1223. Your computer will continue to try and obtain an address
on its own from the network address (DHCP) server.

Error - 10/24/2010 2:35:29 PM | Computer Name = Wes-PC | Source = WinDefend | ID = 2004
Description =

Error - 10/24/2010 2:51:43 PM | Computer Name = Wes-PC | Source = WinDefend | ID = 2004
Description =

Error - 10/24/2010 2:54:53 PM | Computer Name = Wes-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 10/24/2010 2:55:42 PM | Computer Name = Wes-PC | Source = HTTP | ID = 15016
Description =

Error - 10/24/2010 2:56:06 PM | Computer Name = Wes-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 10/24/2010 2:56:06 PM | Computer Name = Wes-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 10/24/2010 2:59:35 PM | Computer Name = Wes-PC | Source = Service Control Manager | ID = 7000
Description =


< End of report >

Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  

Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.

Post the contents of the MBAM Log.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4662

Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

1/12/2011 4:45:26 PM
mbam-log-2011-01-12 (16-45-26).txt

Scan type: Quick scan
Objects scanned: 133385
Time elapsed: 8 minute(s), 54 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Hello.

Please re-open Malwarebytes, click the Update tab, and click Check for Updates. Then, click the Scanner tab, select Perform Quick Scan, and press Scan.

Post the new log when done.

Updated:

alwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5508

Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

1/12/2011 8:56:55 PM
mbam-log-2011-01-12 (20-56-55).txt

Scan type: Quick scan
Objects scanned: 153056
Time elapsed: 3 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Hello.

• Download combofix from here
  Link 1
  

1. If you are using Firefox, make sure that your download settings are as follows:

* Tools->Options->Main tab
* Set to "Always ask me where to Save the files".

2. During the download, rename Combofix to svchost as follows:





3. It is important you rename Combofix during the download, but not after.
4. Please do not rename Combofix to other names, but only to the one indicated.
5. Close any open browsers.
6. We need to disable your local AV (Anti-virus) before running Combofix.

• See HERE for how to disable your AV.
  
• Double click on svchost.exe.
  
• Follow the prompts. NOTE:
  
• Allow combofix to run
  
• Post C:\combofix.txt back here.
  
  Note:
  Do not mouse click combofix's window whilst it's running. That may cause it to stall.
  

It won't let me uninstall avg

Hello.

Please download Revo Uninstall from here: Revo Uinstaller

1. Download and run the setup file for Revo Uninstaller.
   
2. Once setup, run Revo Uninstaller.
   
3. Select the following item for removal by clicking on it once.
   
   AVG 9.0
   
   
4. Then hit the "Uninstall" button at the top.
   
5. Close Revo Uninstaller.
   

Try Combofix now.