sluggish computer could be virus, hardware problem or operating system problem

hi GeekPolice,

A couple of days ago my laptop starting freezing all the time and takes a long time for programs to open. It works ok in safe mode (which is what im using now). Any idea as to what it could be? any help will be appreciated. Heres my log:
OTL logfile created on: 4/19/2011 11:52:24 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\steven\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 64.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 219.29 Gb Total Space | 166.30 Gb Free Space | 75.84% Space Free | Partition Type: NTFS
Drive D: | 13.30 Gb Total Space | 2.20 Gb Free Space | 16.51% Space Free | Partition Type: NTFS
Drive E: | 99.18 Mb Total Space | 92.55 Mb Free Space | 93.32% Space Free | Partition Type: FAT32

Computer Name: STEVEN-PC | User Name: steven | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/04/19 11:48:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\steven\Downloads\OTL.com
PRC - [2011/04/15 11:20:55 | 000,928,496 | ---- | M] (Lavasoft) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
PRC - [2011/04/15 11:20:54 | 001,378,040 | ---- | M] (Lavasoft) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2010/09/23 08:46:07 | 000,755,096 | ---- | M] () -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWWSC.exe


========== Modules (SafeList) ==========

MOD - [2011/04/19 11:48:24 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\steven\Downloads\OTL.com
MOD - [2010/08/21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV:64bit: - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV:64bit: - [2010/09/07 16:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2009/08/05 05:44:56 | 000,203,264 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/07/22 02:33:32 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe -- (STacSV)
SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/03/02 22:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe -- (AESTFilters)
SRV - [2011/04/15 11:20:54 | 001,378,040 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2011/02/28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/04 13:00:08 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Stopped] -- C:\Windows\SysWOW64\dgdersvc.exe -- (dgdersvc)
SRV - [2010/01/30 01:40:16 | 001,043,584 | ---- | M] (Hewlett-Packard Co.) [Auto | Stopped] -- C:\Program Files (x86)\Hp\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2010/01/18 05:35:02 | 009,201,664 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Samsung\Kies\WiselinkPro\WiselinkPro.exe -- (KiesAllShare)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/06/06 01:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009/04/30 11:23:26 | 000,090,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service)
SRV - [2009/02/22 21:00:00 | 000,129,584 | ---- | M] (EasyBits Sofware AS) [Auto | Stopped] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc)
SRV - [2008/11/11 09:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010/09/07 15:47:33 | 000,061,008 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2010/08/04 02:15:44 | 000,268,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010/04/19 20:47:42 | 000,050,688 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2010/02/04 13:00:08 | 000,020,568 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)
DRV:64bit: - [2010/01/27 01:51:34 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_mdm.sys -- (ss_mdm)
DRV:64bit: - [2010/01/27 01:51:34 | 000,127,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV:64bit: - [2010/01/27 01:51:34 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV:64bit: - [2010/01/20 06:53:40 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
DRV:64bit: - [2010/01/20 06:53:40 | 000,127,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV:64bit: - [2010/01/20 06:53:40 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV:64bit: - [2009/11/09 00:42:00 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:64bit: - [2009/09/22 03:47:14 | 001,484,800 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009/08/05 06:23:00 | 006,038,016 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/08/05 06:23:00 | 006,038,016 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2009/07/24 08:49:00 | 000,119,312 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009/07/22 02:33:32 | 000,487,936 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2009/07/15 00:16:34 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2009/07/14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009/07/14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/14 01:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/07/14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2009/06/10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:64bit: - [2009/06/10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:64bit: - [2009/06/10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:64bit: - [2009/06/10 22:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2009/06/10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 21:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009/06/10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009/06/10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R)
DRV:64bit: - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/23 07:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/05/05 06:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2009/04/29 17:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV:64bit: - [2009/03/09 14:49:08 | 000,036,408 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2008/08/28 11:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2008/05/16 11:33:06 | 000,158,760 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdm.sys -- (s0016mdm)
DRV:64bit: - [2008/05/16 11:33:06 | 000,137,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM)
DRV:64bit: - [2008/05/16 11:33:06 | 000,136,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016obex.sys -- (s0016obex)
DRV:64bit: - [2008/05/16 11:33:04 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV:64bit: - [2008/05/16 11:32:56 | 000,115,240 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM)
DRV:64bit: - [2007/05/14 16:06:18 | 000,027,520 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV:64bit: - [2007/04/03 13:57:40 | 000,130,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116unic.sys -- (s116unic) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM)
DRV:64bit: - [2007/04/03 13:57:38 | 000,126,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116mgmt.sys -- (s116mgmt) Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM)
DRV:64bit: - [2007/04/03 13:57:38 | 000,031,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116nd5.sys -- (s116nd5) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS)
DRV:64bit: - [2007/04/03 13:57:36 | 000,144,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116mdm.sys -- (s116mdm)
DRV:64bit: - [2007/04/03 13:57:36 | 000,019,720 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116mdfl.sys -- (s116mdfl)
DRV:64bit: - [2007/04/03 13:57:34 | 000,108,296 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116bus.sys -- (s116bus) Sony Ericsson Device 116 driver (WDM)
DRV - [2010/11/11 19:38:27 | 000,017,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys -- (Lavasoft Kernexplorer)
DRV - [2010/02/04 13:00:08 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2009/11/09 00:42:00 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
DRV - [2009/08/26 00:06:04 | 000,023,344 | ---- | M] (Insyde Software) [Kernel | On_Demand | Stopped] -- C:\SwSetup\sp48895\iscflashx64.sys -- (iscFlash)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/CQNOT/2
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/CQNOT/2
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/CQNOT/2
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/CQNOT/2
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/CQNOT/2
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://uk.ask.com?o=16135&l=dis
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = AC E7 FD D7 D1 90 CB 01 [binary data]
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKLM\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video [2011/01/21 14:00:10 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa [2011/01/21 14:00:11 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/03/21 11:55:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/03/22 11:44:35 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.divxa32 - C:\Windows\SysWow64\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2011/04/10 13:19:37 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011/04/10 13:19:37 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011/04/10 13:19:37 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011/03/21 12:02:24 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBREG
[2011/03/21 12:00:10 | 000,000,000 | ---D | C] -- C:\Users\steven\AppData\Local\HP
[2011/03/21 12:00:01 | 000,000,000 | ---D | C] -- C:\Users\steven\AppData\Roaming\HP
[2011/03/21 11:56:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
[2011/03/21 11:56:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Coupons
[2011/03/21 11:56:18 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Photo Creations
[2011/03/21 11:56:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP Photo Creations
[2011/03/21 11:53:46 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant
[2011/03/21 11:50:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP
[2011/03/21 11:50:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard
[2011/03/21 11:49:01 | 001,408,000 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hpost_p04b.dll
[2011/03/21 11:49:01 | 001,175,552 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hposwia_p04b.dll
[2011/03/21 11:49:01 | 000,521,216 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hposc_p04a.dll
[2011/03/21 11:48:45 | 000,643,200 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpzids40.dll
[2011/03/21 11:48:39 | 000,138,752 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\hpf3l101.dll
[2011/03/21 11:48:13 | 000,000,000 | -H-D | C] -- C:\Config.Msi
[2011/03/21 11:46:38 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2010/08/04 18:41:26 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpeADB3.dll

========== Files - Modified Within 30 Days ==========

[2011/04/19 11:39:03 | 000,000,394 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2011/04/19 11:38:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/04/19 11:38:23 | 1406,296,064 | -HS- | M] () -- C:\hiberfil.sys
[2011/04/18 19:30:41 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/18 19:30:41 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/18 19:24:41 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1002UA.job
[2011/04/18 19:22:35 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1004UA.job
[2011/04/17 12:23:06 | 000,000,850 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1004Core.job
[2011/04/16 12:00:14 | 000,001,021 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011/04/14 16:23:01 | 000,000,858 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1002Core.job
[2011/04/10 13:19:23 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011/04/10 13:19:22 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2011/04/10 13:19:22 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011/04/10 13:19:22 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011/04/08 15:55:32 | 000,726,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/04/08 15:55:32 | 000,628,460 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/04/08 15:55:32 | 000,110,612 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/03/28 23:26:33 | 000,002,407 | ---- | M] () -- C:\Users\steven\Desktop\Google Chrome.lnk
[2011/03/21 21:40:27 | 000,377,208 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/03/21 12:01:10 | 000,208,133 | ---- | M] () -- C:\Windows\hpoins47.dat
[2011/03/21 11:53:03 | 000,002,099 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

========== Files Created - No Company Name ==========

[2011/04/18 19:19:01 | 000,000,394 | ---- | C] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2011/03/21 11:56:55 | 000,001,380 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Default Manager.lnk
[2011/03/21 11:53:03 | 000,002,099 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2011/03/21 11:46:59 | 000,208,133 | ---- | C] () -- C:\Windows\hpoins47.dat
[2011/02/23 19:05:15 | 000,000,104 | ---- | C] () -- C:\Windows\ABC_mru.ini
[2011/02/23 18:57:24 | 000,114,688 | ---- | C] () -- C:\Windows\SysWow64\msn9mcp9.dll
[2010/09/30 14:28:14 | 000,007,602 | ---- | C] () -- C:\Users\steven\AppData\Local\Resmon.ResmonCfg
[2010/07/27 16:05:05 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010/06/15 23:28:54 | 000,002,857 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2010/04/10 10:32:34 | 000,000,282 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini
[2010/04/10 10:32:34 | 000,000,223 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini
[2010/04/01 00:39:01 | 000,000,574 | ---- | C] () -- C:\Windows\hpomdl47.dat
[2009/12/17 12:56:52 | 000,009,868 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat
[2009/12/17 10:47:50 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/11/16 03:00:26 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\MAMACExtract.dll
[2009/11/09 03:55:50 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2009/11/09 03:55:50 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2009/11/09 03:55:50 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2009/11/09 03:55:50 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2009/09/30 00:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL
[2009/07/14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 22:59:36 | 001,498,564 | ---- | C] () -- C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2008/11/06 17:37:32 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll
[2008/11/06 17:33:02 | 000,012,288 | ---- | C] () -- C:\Windows\SysWow64\DivXWMPExtType.dll

========== Custom Scans ==========


< %systemroot%\Fonts\*.com >
[2009/07/14 06:32:31 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 06:32:31 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 06:32:31 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 06:32:31 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 21:49:50 | 000,000,065 | -H-- | M] () -- C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/09/07 16:12:17 | 000,038,848 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2010/11/10 03:28:46 | 000,301,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 05:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/07/27 16:05:55 | 000,000,221 | -HS- | M] () -- C:\Users\steven\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2009/06/10 22:20:04 | 000,000,802 | ---- | M] () -- C:\Windows\addins\FXSEXT.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2010/08/03 20:25:48 | 000,000,402 | -HS- | M] () -- C:\Users\steven\Favorites\desktop.ini
[2010/10/13 16:41:40 | 000,000,258 | ---- | M] () -- C:\Users\steven\Favorites\NCH Audio and Telephony Software.lnk
[2010/10/13 16:41:44 | 000,000,288 | ---- | M] () -- C:\Users\steven\Favorites\NCH Software Download.lnk

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2010/08/04 18:41:26 | 000,148,736 | ---- | M] (Avanquest Software) -- C:\ProgramData\hpeADB3.dll
[2011/04/18 19:18:04 | 000,000,175 | ---- | M] () -- C:\ProgramData\HPWALog.txt
[2011/03/21 12:01:12 | 000,000,781 | ---- | M] () -- C:\ProgramData\hpzinstall.log
[2010/04/10 10:47:25 | 000,000,032 | ---- | M] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
[2009/12/17 12:46:21 | 000,000,109 | ---- | M] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
[2010/04/10 10:46:55 | 000,000,032 | ---- | M] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
[2009/12/17 12:42:26 | 000,000,105 | ---- | M] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
[2010/04/10 10:46:17 | 000,000,032 | ---- | M] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
[2010/04/10 10:47:13 | 000,000,032 | ---- | M] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
[2009/12/17 12:41:29 | 000,000,107 | ---- | M] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
[2009/12/17 12:45:41 | 000,000,110 | ---- | M] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
[2010/04/10 10:47:33 | 000,000,105 | ---- | M] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\*.exe /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.sys >

< %systemroot%\system32\drivers\*.dll >

< %systemroot%\system32\drivers\*.ini >

< %systemroot%\system32\drivers\*.exe >

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >

< %SYSTEMDRIVE%\*.* >
[2010/08/30 17:33:05 | 000,002,006 | ---- | M] () -- C:\aqua_bitmap.cpp
[2009/07/14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1028.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1031.txt
[2007/11/07 08:00:40 | 000,010,134 | ---- | M] () -- C:\eula.1033.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1036.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1040.txt
[2007/11/07 08:00:40 | 000,000,118 | ---- | M] () -- C:\eula.1041.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1042.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.2052.txt
[2007/11/07 08:00:40 | 000,017,734 | ---- | M] () -- C:\eula.3082.txt
[2007/11/07 08:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini
[2011/04/19 11:38:23 | 1406,296,064 | -HS- | M] () -- C:\hiberfil.sys
[2007/11/07 08:44:20 | 000,855,040 | ---- | M] (Microsoft Corporation) -- C:\install.exe
[2007/11/07 08:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini
[2007/11/07 08:44:20 | 000,075,280 | ---- | M] (Microsoft Corporation) -- C:\install.res.1028.dll
[2007/11/07 08:44:20 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1031.dll
[2007/11/07 08:44:20 | 000,090,128 | ---- | M] (Microsoft Corporation) -- C:\install.res.1033.dll
[2007/11/07 08:44:20 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.1036.dll
[2007/11/07 08:44:20 | 000,094,224 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll
[2007/11/07 08:44:20 | 000,080,400 | ---- | M] (Microsoft Corporation) -- C:\install.res.1041.dll
[2007/11/07 08:44:20 | 000,078,864 | ---- | M] (Microsoft Corporation) -- C:\install.res.1042.dll
[2007/11/07 08:44:20 | 000,074,768 | ---- | M] (Microsoft Corporation) -- C:\install.res.2052.dll
[2007/11/07 08:44:20 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.3082.dll
[2011/04/19 11:45:56 | 000,043,283 | ---- | M] () -- C:\JavaRa.log
[2011/04/19 11:38:27 | 1875,062,784 | -HS- | M] () -- C:\pagefile.sys
[2007/11/07 08:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp
[2007/11/07 08:50:40 | 001,927,956 | ---- | M] () -- C:\VC_RED.cab
[2007/11/07 08:53:12 | 000,242,176 | ---- | M] () -- C:\VC_RED.MSI

< %PROGRAMFILES%\*. >
[2009/12/17 12:20:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2010/04/10 10:35:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AMD
[2010/08/06 01:16:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2011/02/24 12:14:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ask.com
[2010/04/10 10:36:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Atheros
[2010/10/18 13:19:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies
[2010/10/21 14:58:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Belarc
[2010/10/20 17:37:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2011/04/16 12:00:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CCleaner
[2011/03/21 11:50:30 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2011/01/05 18:06:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Conduit
[2011/01/05 18:05:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ConduitEngine
[2011/03/21 11:56:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Coupons
[2010/10/23 21:12:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CPU Thermometer
[2010/04/10 10:49:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
[2011/02/11 19:37:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
[2011/03/13 13:42:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Driving Test Success - All Tests (2007-2008)
[2011/02/19 11:53:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EASEUS
[2011/01/13 14:04:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Easy Graphic Converter
[2010/07/27 16:05:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EasyBits For Kids
[2011/02/23 19:02:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FileStream
[2011/03/28 17:49:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Full Tilt Poker
[2010/07/31 17:07:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GRETECH
[2010/08/25 13:11:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hewlett-Packard
[2011/03/21 11:56:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hp
[2009/12/17 11:23:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Games
[2011/03/21 11:56:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Photo Creations
[2010/08/30 17:45:32 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2011/02/10 16:10:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2010/10/20 17:44:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2011/04/19 11:45:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2010/09/05 13:34:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\JRE
[2010/11/05 10:06:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lavalys
[2010/10/22 14:00:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lavasoft
[2011/04/10 16:56:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/08/30 17:33:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MarkAny
[2011/03/24 12:09:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2009/12/17 11:47:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2009/12/17 11:48:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
[2011/02/27 16:07:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2009/12/17 10:57:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2011/01/06 04:05:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
[2011/01/07 22:44:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2010/11/05 10:59:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Motherboard Monitor 5
[2009/07/14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2010/10/06 12:30:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2010/04/10 10:50:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\muvee Technologies
[2011/02/23 19:30:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NCH Software
[2010/10/13 16:41:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NCH Swift Sound
[2011/02/23 19:25:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\nonnoi
[2010/07/27 15:58:42 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Online Services
[2010/09/05 13:34:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenOffice.org 3
[2011/04/13 17:04:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Opera
[2010/08/30 17:40:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PC Connectivity Solution
[2011/03/24 17:41:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PKR
[2010/10/04 18:12:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Poker Pro Labs
[2011/02/08 13:29:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PokerStars
[2010/10/20 17:40:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
[2010/04/10 10:35:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2009/07/14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2010/08/30 17:33:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Samsung
[2011/01/05 17:37:37 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2010/08/04 18:40:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Sony Ericsson
[2009/07/14 05:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2011/01/05 18:06:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\uTorrentBar
[2009/07/14 06:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2011/01/16 16:09:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2011/01/06 04:17:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2010/10/15 12:56:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009/07/14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2009/07/14 06:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2009/07/14 06:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2010/07/27 15:58:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2010/10/08 19:42:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR
[2010/10/24 12:15:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Yahoo!

< %appdata%\*.* >


< MD5 for: AGP440.SYS >
[2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009/07/14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: DISK.SYS >
[2009/07/14 02:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\drivers\disk.sys
[2009/07/14 02:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.sys
[2009/07/14 02:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\winsxs\amd64_disk.inf_31bf3856ad364e35_6.1.7600.16385_none_55bb738b8ddd8a01\disk.sys

< MD5 for: EVENTLOG.DLL >
[2007/05/18 06:34:04 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\CyberLink\PowerDirector\EventLog.dll

< MD5 for: IASTORV.SYS >
[2009/07/14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2009/07/14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2009/07/14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\SysNative\netlogon.dll
[2009/07/14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2009/07/14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\drivers\nvstor.sys
[2009/07/14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll
[2009/07/14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

< MD5 for: USBSTOR.SYS >
[2009/07/14 01:06:34 | 000,089,600 | ---- | M] (Microsoft Corporation) MD5=080D3820DA6C046BE82FC8B45A893E83 -- C:\Windows\SysNative\drivers\USBSTOR.SYS
[2009/07/14 01:06:34 | 000,089,600 | ---- | M] (Microsoft Corporation) MD5=080D3820DA6C046BE82FC8B45A893E83 -- C:\Windows\SysNative\DriverStore\FileRepository\usbstor.inf_amd64_neutral_c301b770e0bfb179\USBSTOR.SYS
[2009/07/14 01:06:34 | 000,089,600 | ---- | M] (Microsoft Corporation) MD5=080D3820DA6C046BE82FC8B45A893E83 -- C:\Windows\winsxs\amd64_usbstor.inf_31bf3856ad364e35_6.1.7600.16385_none_a47b405db18421ea\USBSTOR.SYS

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:DFC5A2B2
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:A8ADE5D8
@Alternate Data Stream - 105 bytes -> C:\ProgramData\Temp:430C6D84

< End of report >

Hello.

Please download ComboFix from BleepingComputer.com

Alternate link: GeeksToGo.com


Rename ComboFix.exe to commy.exe before you save it to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
  
• Click Start then copy paste the following command into the search box & hit enter: "%userprofile%\desktop\commy.exe" /stepdel
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. This will not install in Vista. Just continue scanning, and skip the console install.
  
• When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.
  

thanks for the help belazhur. i think the slowness of my computer may have been due to windows updates as when the windows update process didnt start up when i booted the computer it worked fine but after the process started the computer went slow again. I found I had 28 windows updates! the updates have all been installed now. Heres the combofix log:

ComboFix 11-04-19.06 - steven 20/04/2011 16:39:30.1.1 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.1788.596 [GMT 1:00]
Running from: c:\users\steven\Desktop\commy.exe
Command switches used :: /stepdel
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {61CDFD9D-3CAC-9270-C6FC-52325ACB795B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\steven\AppData\Roaming\Local
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(249).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(248).ddp
C:\Install.exe
c:\programdata\hpeADB3.dll
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(10).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(100).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(101).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(102).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(103).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(104).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(105).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(106).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(107).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(108).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(109).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(11).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(110).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(111).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(112).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(113).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(114).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(115).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(116).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(117).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(118).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(119).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(12).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(120).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(121).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(122).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(123).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(124).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(125).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(126).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(127).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(128).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(129).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(13).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(130).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(131).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(132).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(133).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(134).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(135).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(136).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(137).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(138).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(139).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(14).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(140).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(141).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(142).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(143).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(144).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(145).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(146).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(147).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(148).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(149).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(15).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(150).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(151).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(152).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(153).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(154).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(155).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(156).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(157).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(158).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(159).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(16).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(160).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(161).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(162).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(163).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(164).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(165).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(166).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(167).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(168).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(169).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(17).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(170).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(171).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(172).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(173).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(174).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(175).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(176).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(177).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(178).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(179).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(18).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(180).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(181).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(182).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(183).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(184).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(185).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(186).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(187).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(188).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(189).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(19).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(190).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(191).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(192).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(193).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(194).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(195).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(196).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(197).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(198).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(199).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(2).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(20).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(200).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(201).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(202).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(203).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(204).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(205).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(206).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(207).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(208).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(209).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(21).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(210).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(211).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(212).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(213).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(214).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(215).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(216).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(217).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(218).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(219).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(22).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(220).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(221).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(222).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(223).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(224).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(225).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(226).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(227).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(228).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(229).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(23).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(230).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(231).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(232).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(233).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(234).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(235).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(236).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(237).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(238).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(239).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(24).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(240).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(241).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(242).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(243).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(244).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(245).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(246).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(247).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(248).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(25).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(26).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(27).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(28).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(29).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(3).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(30).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(31).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(32).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(33).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(34).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(35).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(36).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(37).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(38).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(39).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(4).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(40).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(41).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(42).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(43).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(44).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(45).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(46).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(47).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(48).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(49).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(5).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(50).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(51).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(52).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(53).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(54).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(55).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(56).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(57).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(58).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(59).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(6).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(60).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(61).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(62).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(63).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(64).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(65).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(66).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(67).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(68).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(69).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(7).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(70).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(71).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(72).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(73).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(74).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(75).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(76).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(77).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(78).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(79).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(8).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(80).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(81).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(82).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(83).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(84).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(85).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(86).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(87).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(88).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(89).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(9).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(90).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(91).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(92).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(93).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(94).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(95).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(96).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(97).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(98).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2)(99).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi(2).ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\d15ok4a8imxs1.avi.ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\greek.s04e04.hdtv.xvid-fqm_ns.avi.ddr
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(10).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(100).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(101).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(102).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(103).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(104).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(105).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(106).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(107).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(108).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(109).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(11).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(110).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(111).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(112).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(113).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(114).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(115).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(116).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(117).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(118).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(119).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(12).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(120).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(121).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(122).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(123).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(124).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(125).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(126).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(127).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(128).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(129).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(13).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(130).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(131).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(132).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(133).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(134).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(135).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(136).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(137).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(138).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(139).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(14).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(140).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(141).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(142).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(143).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(144).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(145).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(146).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(147).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(148).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(149).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(15).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(150).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(151).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(152).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(153).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(154).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(155).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(156).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(157).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(158).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(159).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(16).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(160).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(161).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(162).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(163).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(164).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(165).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(166).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(167).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(168).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(169).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(17).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(170).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(171).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(172).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(173).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(174).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(175).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(176).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(177).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(178).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(179).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(18).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(180).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(181).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(182).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(183).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(184).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(185).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(186).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(187).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(188).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(189).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(19).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(190).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(191).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(192).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(193).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(194).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(195).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(196).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(197).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(198).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(199).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(2).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(20).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(200).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(201).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(202).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(203).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(204).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(205).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(206).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(207).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(208).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(209).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(21).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(210).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(211).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(212).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(213).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(214).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(215).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(216).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(217).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(218).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(219).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(22).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(220).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(221).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(222).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(223).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(224).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(225).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(226).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(227).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(228).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(229).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(23).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(230).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(231).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(232).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(233).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(234).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(235).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(236).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(237).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(238).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(239).ddp

c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(24).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(240).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(241).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(242).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(243).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(244).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(245).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(246).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(247).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(25).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(26).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(27).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(28).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(29).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(3).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(30).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(31).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(32).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(33).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(34).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(35).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(36).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(37).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(38).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(39).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(4).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(40).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(41).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(42).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(43).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(44).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(45).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(46).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(47).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(48).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(49).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(5).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(50).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(51).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(52).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(53).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(54).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(55).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(56).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(57).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(58).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(59).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(6).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(60).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(61).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(62).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(63).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(64).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(65).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(66).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(67).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(68).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(69).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(7).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(70).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(71).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(72).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(73).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(74).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(75).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(76).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(77).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(78).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(79).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(8).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(80).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(81).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(82).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(83).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(84).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(85).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(86).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(87).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(88).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(89).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(9).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(90).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(91).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(92).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(93).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(94).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(95).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(96).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(97).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(98).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi(99).ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\d15ok4a8imxs1.avi.ddp
c:\users\steven\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\greek.s04e04.hdtv.xvid-fqm_ns.avi
c:\windows\system32\arp.exe . . . . Failed to delete
c:\windows\system32\slwga.dll . . . . Failed to delete
c:\windows\system32\systemcpl.dll . . . . Failed to delete
c:\windows\SysWow64\arp.exe
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-03-20 to 2011-04-20 )))))))))))))))))))))))))))))))
.
.
2011-04-20 15:56 . 2011-04-20 15:56 -------- d-----w- c:\users\dols\AppData\Local\temp
2011-04-20 15:56 . 2011-04-20 15:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-20 10:40 . 2011-04-20 15:32 -------- d-----w- C:\ComboFix
2011-04-20 10:29 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{63951671-7A4A-43A3-A259-015F7D08878D}\mpengine.dll
2011-04-20 10:16 . 2011-03-08 05:38 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-04-20 10:16 . 2011-03-08 06:14 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-20 10:05 . 2011-02-12 06:14 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2011-04-20 10:05 . 2011-02-23 05:15 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-20 10:05 . 2011-02-23 05:15 286720 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-20 10:05 . 2011-02-23 05:15 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-20 10:05 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-03-26 20:14 . 2011-03-26 20:14 -------- d-----w- c:\users\dols\AppData\Local\FullTiltPoker
2011-03-22 13:45 . 2011-03-22 13:45 -------- d-----w- c:\users\dols\AppData\Roaming\HP
2011-03-22 13:44 . 2011-03-22 13:45 -------- d-----w- c:\users\dols\AppData\Local\Adobe
2011-03-21 17:52 . 2011-03-21 17:52 -------- d-----w- c:\users\dols\AppData\Roaming\HpUpdate
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-10 12:19 . 2010-07-27 15:34 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-03-09 16:28 . 2010-06-24 11:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-23 17:57 . 2011-02-23 17:57 114688 ----a-w- c:\windows\SysWow64\msn9mcp9.dll
2011-02-19 06:37 . 2011-03-09 16:09 1135104 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 06:37 . 2011-03-09 16:08 1540608 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 06:36 . 2011-03-09 16:08 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 05:32 . 2011-03-09 16:08 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 05:32 . 2011-03-09 16:08 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-02-02 17:11 . 2010-07-27 15:11 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-01-26 06:53 . 2011-02-09 11:42 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-26 06:53 . 2011-02-09 11:42 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-01-26 06:31 . 2011-02-09 11:42 144384 ----a-w- c:\windows\system32\cdd.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 12:51 3911776 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 12:51 3911776 ----a-w- c:\program files (x86)\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-09-28 22:44 1400712 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2009-06-02 24264488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-03 98304]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-09-08 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-09-24 421160]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-01-10 1230704]
"DivX Download Manager"="c:\program files (x86)\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files (x86)\PC Tools Security\BDT\BDTUpdateService.exe [x]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 iscFlash;iscFlash;c:\swsetup\sp48895\iscflashx64.sys [2009-08-25 23344]
R3 KiesAllShare;SAMSUNG KiesAllShare Service;c:\program files (x86)\Samsung\Kies\WiselinkPro\WiselinkPro.exe [2010-01-18 9201664]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [x]
R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [x]
R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [x]
R3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0016mgmt.sys [x]
R3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0016obex.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2009-11-08 16392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-03-02 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 dgdersvc;Device Error Recovery Service;c:\windows\SysWOW64\dgdersvc.exe [2010-02-04 95568]
S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-04-15 1378040]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-02-04 20568]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [2010-11-11 17440]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 20:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-20 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-09-23 10:20]
.
2011-04-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1002Core.job
- c:\users\steven\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-27 15:12]
.
2011-04-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1002UA.job
- c:\users\steven\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-27 15:12]
.
2011-04-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1004Core.job
- c:\users\dols\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-16 12:17]
.
2011-04-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1004UA.job
- c:\users\dols\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-16 12:17]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-17 171520]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uStart Page = hxxp://uk.ask.com?o=16135&l=dis
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
.
**************************************************************************
.
Completion time: 2011-04-20 17:27:45 - machine was rebooted
ComboFix-quarantined-files.txt 2011-04-20 16:27
.
Pre-Run: 177,137,025,024 bytes free
Post-Run: 176,821,764,096 bytes free
.
- - End Of File - - 92164D18D68EC83CB1B0382E873BC0D6

Hello.

1. Close any open browsers.
   
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
   
3. Open notepad and copy/paste the text in the quotebox below into it:
   

   Code:

   
KILLALL::

Driver::
ezSharedSvc

NetSvc::
ezSharedSvc

DDS::
uStart Page = hxxp://uk.ask.com?o=16135&l=dis
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm

   
   
4. Save this as CFScript.txt, in the same location as ComboFix.exe
   
   
   
   
5. Referring to the picture above, drag CFScript into ComboFix.exe
   
6. When finished, it shall produce a log for you at C:\ComboFix.txt
   
7. Please post the contents of the log in your next reply.
   

thanks belazhur,

the combofix log


ComboFix 11-04-20.04 - steven 21/04/2011 17:49:07.3.1 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.1788.1018 [GMT 1:00]
Running from: c:\users\steven\Desktop\commy.exe
Command switches used :: c:\users\steven\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {61CDFD9D-3CAC-9270-C6FC-52325ACB795B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_ezSharedSvc
.
.
((((((((((((((((((((((((( Files Created from 2011-03-21 to 2011-04-21 )))))))))))))))))))))))))))))))
.
.
2011-04-21 17:04 . 2011-04-21 17:04 -------- d-----w- c:\users\dols\AppData\Local\temp
2011-04-21 17:04 . 2011-04-21 17:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-20 10:40 . 2011-04-20 15:32 -------- d-----w- C:\ComboFix
2011-04-20 10:29 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{63951671-7A4A-43A3-A259-015F7D08878D}\mpengine.dll
2011-04-20 10:16 . 2011-03-08 05:38 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-04-20 10:16 . 2011-03-08 06:14 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-20 10:05 . 2011-02-12 06:14 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2011-04-20 10:05 . 2011-02-23 05:15 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-20 10:05 . 2011-02-23 05:15 286720 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-20 10:05 . 2011-02-23 05:15 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-20 10:05 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-03-26 20:14 . 2011-03-26 20:14 -------- d-----w- c:\users\dols\AppData\Local\FullTiltPoker
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-10 12:19 . 2010-07-27 15:34 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-03-09 16:28 . 2010-06-24 11:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-23 17:57 . 2011-02-23 17:57 114688 ----a-w- c:\windows\SysWow64\msn9mcp9.dll
2011-02-19 06:37 . 2011-03-09 16:09 1135104 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 06:37 . 2011-03-09 16:08 1540608 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 06:36 . 2011-03-09 16:08 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 05:32 . 2011-03-09 16:08 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 05:32 . 2011-03-09 16:08 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-02-02 17:11 . 2010-07-27 15:11 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-01-26 06:53 . 2011-02-09 11:42 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-26 06:53 . 2011-02-09 11:42 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-01-26 06:31 . 2011-02-09 11:42 144384 ----a-w- c:\windows\system32\cdd.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-04-20_16.01.29 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-14 04:54 . 2011-04-21 17:08 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-04-20 15:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-04-20 15:59 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-04-21 17:08 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-04-20 15:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-04-21 17:08 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-07-28 17:32 . 2011-04-20 10:41 11206 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2010-07-28 17:32 . 2011-04-20 23:30 11206 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2009-07-14 05:10 . 2011-04-21 15:18 62980 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-04-20 16:01 62980 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-07-27 15:43 . 2011-04-21 17:15 33852 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4097030396-1525476960-3902642890-1002_UserData.bin
- 2010-04-10 09:46 . 2011-04-20 10:44 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-04-10 09:46 . 2011-04-21 10:12 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-04-10 09:46 . 2011-04-21 10:12 49152 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-04-10 09:46 . 2011-04-20 10:44 49152 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-04-21 10:12 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-04-20 10:44 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-07-27 15:43 . 2011-04-20 16:00 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-07-27 15:43 . 2011-04-21 17:09 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:46 . 2011-04-21 17:14 78552 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2010-07-27 15:43 . 2011-04-20 16:00 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-07-27 15:43 . 2011-04-21 17:09 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-07-27 15:43 . 2011-04-20 16:00 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-07-27 15:43 . 2011-04-21 17:09 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-07-27 13:54 . 2011-04-21 17:09 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-07-27 13:54 . 2011-04-20 16:00 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-07-27 13:54 . 2011-04-21 17:09 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-07-27 13:54 . 2011-04-20 16:00 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-20 16:08 . 2011-04-20 16:08 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ca665309b6753bc6126567290689ba4e\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2011-04-20 16:08 . 2011-04-20 16:08 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\bf84cf9013c3d7bee5ad42c3bc04b2fe\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2011-04-20 16:09 . 2011-04-20 16:09 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\b8dcbfd51e0d89e7e16048c9efbc6aad\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2011-04-20 16:08 . 2011-04-20 16:08 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\8342c096f1660f99a19b30529fd105d3\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2011-04-20 16:08 . 2011-04-20 16:08 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\5aa44d13c29d5251935666fbcc4f9d7c\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2011-04-20 16:08 . 2011-04-20 16:08 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\13d89aae42327385e99037b0a1b97181\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
- 2011-04-20 15:58 . 2011-04-20 15:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-04-21 17:07 . 2011-04-21 17:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-04-20 15:58 . 2011-04-20 15:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-04-21 17:07 . 2011-04-21 17:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-04-20 10:20 . 2011-02-24 05:32 288256 c:\windows\SysWOW64\XpsGdiConverter.dll
- 2011-02-23 09:37 . 2011-01-07 07:31 288256 c:\windows\SysWOW64\XpsGdiConverter.dll
+ 2011-04-21 10:08 . 2011-04-21 10:08 235168 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10p_Plugin.exe
+ 2011-04-20 10:20 . 2011-02-24 06:30 476160 c:\windows\system32\XpsGdiConverter.dll
+ 2010-07-27 15:55 . 2011-04-20 22:21 272712 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2009-07-14 02:36 . 2011-04-20 16:48 628460 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-04-20 16:48 110612 c:\windows\system32\perfc009.dat
- 2009-07-14 05:01 . 2011-04-20 15:57 356848 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2011-04-21 17:06 356848 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-04-20 16:06 . 2011-04-20 16:06 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\51d5e62fd2fbf00f545f39e0d024a98c\Microsoft.Transactions.Bridge.Dtc.ni.dll
- 2011-01-21 12:59 . 2011-03-03 12:40 6053536 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
+ 2011-01-21 12:59 . 2011-04-21 10:08 6053536 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
- 2009-07-14 04:45 . 2011-04-20 10:47 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:45 . 2011-04-21 15:18 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2011-04-20 16:07 . 2011-04-20 16:07 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\dda6d8c7413334b605fcf590a702e9f1\Microsoft.VisualBasic.ni.dll
- 2009-07-14 02:34 . 2011-04-20 10:56 10223616 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2009-07-14 02:34 . 2011-04-21 10:12 10223616 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 12:51 3911776 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 12:51 3911776 ----a-w- c:\program files (x86)\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-09-28 22:44 1400712 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2009-06-02 24264488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-03 98304]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-09-08 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-09-24 421160]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-01-10 1230704]
"DivX Download Manager"="c:\program files (x86)\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files (x86)\PC Tools Security\BDT\BDTUpdateService.exe [x]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 iscFlash;iscFlash;c:\swsetup\sp48895\iscflashx64.sys [2009-08-25 23344]
R3 KiesAllShare;SAMSUNG KiesAllShare Service;c:\program files (x86)\Samsung\Kies\WiselinkPro\WiselinkPro.exe [2010-01-18 9201664]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [2010-11-11 17440]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [x]
R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [x]
R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [x]
R3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0016mgmt.sys [x]
R3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0016obex.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2009-11-08 16392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-03-02 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 dgdersvc;Device Error Recovery Service;c:\windows\SysWOW64\dgdersvc.exe [2010-02-04 95568]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-04-15 1378040]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-02-04 20568]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 20:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-21 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-09-23 10:20]
.
2011-04-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1002Core.job
- c:\users\steven\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-27 15:12]
.
2011-04-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1002UA.job
- c:\users\steven\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-27 15:12]
.
2011-04-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1004Core.job
- c:\users\dols\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-16 12:17]
.
2011-04-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4097030396-1525476960-3902642890-1004UA.job
- c:\users\dols\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-16 12:17]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="c:\commy\CF3683.cfxxe" [X]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-17 171520]
.
------- Supplementary Scan -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
mLocal Page = %SystemRoot%\system32\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\program files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
c:\program files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
.
**************************************************************************
.
Completion time: 2011-04-21 18:39:25 - machine was rebooted
ComboFix-quarantined-files.txt 2011-04-21 17:39
ComboFix2.txt 2011-04-20 16:27
.
Pre-Run: 176,302,702,592 bytes free
Post-Run: 175,704,760,320 bytes free
.
- - End Of File - - 010573636A67F8C7C4B3904B4A44DB50

Run ESET Online Scan
Please do an online scan with ESET Online Scanner. Please use Internet Explorer as it uses ActiveX.

• Check (tick) this box: YES, I accept the Terms of Use.
  
• Click on the Start button next to it.
  
• When prompted to run ActiveX. click Yes.
  
• You will be asked to install an ActiveX. Click Install.
  
• Once installed, the scanner will be initialized.
  
• After the scanner is initialized, click Start.
  
• Check (tick) Remove found threats box.
  
• Check (tick) Scan unwanted applications.
  
• Click on Scan.
  
• It will start scanning. Please be patient.
  
• Once the scan is done, the log will be saved here: C:\Program Files\esetonlinescanner\log.txt.
  

i dont think this right but this is what was in the log:
ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK

Hello.

Hello.

Please download the current version of HijackThis from HERE

• Double click and run the installer.
  
• It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  
• After installing, you should get the user agreement, press accept and Hijack This will run.
  
• When Hijack This opens, click "Open the Misc Tools section"
  
• Then select "Open Uninstall Manager"
  
• Click on "Save List..." (generates uninstall_list.txt)
  
• Click Save, copy and paste the results in your next post.
  

hi,


Update for Microsoft Office 2007 (KB2508958)
Acrobat.com
ActiveCheck component for HP Active Support Library
Ad-Aware
Ad-Aware
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.1 MUI
Adobe Shockwave Player
AMD USB Filter Driver
Apple Application Support
Apple Software Update
Ask Toolbar
ASP/Image2WBMP v1.00
Atheros Driver Installation Program
avast! Free Antivirus
Belarc Advisor 8.1
Bing Bar
Compatibility Pack for the 2007 Office system
Conduit Engine
Coupon Printer for Windows
CPU Thermometer 1.0
CyberLink DVD Suite
CyberLink DVD Suite
CyberLink MediaShow
CyberLink MediaShow
CyberLink PowerDVD 8
CyberLink PowerDVD 8
CyberLink YouCam
CyberLink YouCam
D3DX10
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Setup
DivX Web Player
Driving Test Success - All Tests (2007-2008)
EASEUS Data Recovery Wizard Free Edition 5.0.1
ESET Online Scanner v3
EVEREST Home Edition v2.20
Express Burn Disc Burning Software
Express Rip
Full Tilt Poker
GOM Player
HiJackThis
Hold'em Poker Calculator
HP Advisor
HP Customer Experience Enhancements
HP Games
HP Photo Creations
HP Quick Launch Buttons
HP Setup
HP Support Assistant
HP Update
HP User Guides 0148
HP Wireless Assistant
HPAsset component for HP Active Support Library
IDT Audio
Java(TM) 6 Update 20
Java(TM) 6 Update 24
LabelPrint
LabelPrint
LightScribe System Software
Magic Desktop
Malwarebytes' Anti-Malware
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office Home and Student 2007
Microsoft Office Live Add-in 1.5
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee Reveal
OpenOffice.org 3.2
Opera 11.10
PC Connectivity Solution
PKR
PokerStars
Power2Go
Power2Go
PowerDirector
PowerDirector
Prism Video Converter
QLBCASL
QuickTime
Realtek 8136 8168 8169 Ethernet Driver
Realtek USB 2.0 Card Reader
Recovery Manager
Samsung Kies
Samsung Kies
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB2466156)
Security Update for 2007 Microsoft Office System (KB2509488)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft Office Excel 2007 (KB2464583)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB2464594)
Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Skype™ 4.0
Sony Ericsson PC Suite 6.011.00
Update for 2007 Microsoft Office System (KB2284654)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 (KB974631)
Update for Microsoft Office Word 2007 (KB974631)
Update for Microsoft Office Word 2007 Help (KB963665)
uTorrentBar Toolbar
VC80CRTRedist - 8.0.50727.4053
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WavePad Sound Editor
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Installer
Windows Live Movie Maker
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
WinRAR archiver

Hello.

• Click Start >> Control Panel.
  
• Under the Programs click Uninstall a Program
  
• Highlight the following:
  
  Adobe Reader 9.1 MUI
  Ask Toolbar
  Java(TM) 6 Update 20
  Java(TM) 6 Update 24
  uTorrentBar Toolbar
  
  
• Click on the Uninstall/Change button at the top.
  

Updating Java:

• Download the latest version of Java SE Runtime Environment (JRE) 6 Update 24.
  
• Click the "Download JRE" button to the right.
  
• In the Window that opens, select your platform, check the "agree" box, and click Continue.
  
• Click on the link to download Windows Offline Installation and save to your desktop.
  
• Close any programs you may have running - especially your web browser.
  
• Then from your desktop double-click on jre-6u24-windows-i586.exe that you downloaded to install the newest version.
  

Then download and install Adobe Reader X

How is the machine running now?

Thanks belazhur,

For some reason; ask toolbar, java 6 update 20 and java 6 update 24 doesnt appear.

The machine has been working fine since i installed the windows updates as stated in a previous post.

Thanks for your help

[b]

Okay, did you install the newer updates?

yeh ive installed the newer updates and on the uninstall list i have java update 25 (the new update), java 24 and java development kit 15