OTL by OldTimer - Version 3.1.32.0 Folder = C:\Documents and Settings\HelpAssistant\My Documents
Windows XP Professional Edition Service Pack 3, v.5913 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1,014.00 Mb Total Physical Memory | 809.00 Mb Available Physical Memory | 80.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.50 Gb Total Space | 24.14 Gb Free Space | 32.40% Space Free | Partition Type: NTFS
Drive D: | 7.67 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: USER-471332FE4E
Current User Name: user
Logged in as Administrator.
Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ========== PRC - [2010/03/01 06:27:17 | 000,551,424 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HelpAssistant\My Documents\OTL.exe
PRC - [2009/12/02 08:52:42 | 001,055,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2009/03/10 21:18:14 | 000,934,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WgaTray.exe
PRC - [2008/01/26 00:57:40 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
========== Modules (SafeList) ========== MOD - [2010/03/01 06:27:17 | 000,551,424 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HelpAssistant\My Documents\OTL.exe
MOD - [2008/01/26 00:58:08 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.3300_x-ww_d7ca0dc2\comctl32.dll
========== Win32 Services (SafeList) ========== SRV - [2010/01/18 14:14:24 | 001,141,712 | ---- | M] (PC Tools) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/01/18 08:01:48 | 002,304,192 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG9\avgfws9.exe -- (avgfws9)
SRV - [2009/12/09 15:23:34 | 000,365,280 | ---- | M] (PC Tools) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2009/12/02 08:52:31 | 000,906,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2009/12/02 08:52:29 | 000,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009/12/02 08:52:25 | 005,832,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2009/11/10 10:28:08 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2009/05/31 11:17:36 | 000,295,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\termsrv32.dll -- (TermService)
SRV - [2006/03/17 16:25:16 | 000,065,536 | ---- | M] (Broadcom Corporation) [Auto | Stopped] -- C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe -- (ASFIPmon)
SRV - [2005/04/03 23:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
========== Driver Services (SafeList) ========== DRV - [2010/02/17 10:25:50 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2010/02/17 10:15:58 | 000,066,632 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/02/17 10:15:58 | 000,012,872 | R--- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009/12/02 08:53:01 | 000,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2009/12/02 08:53:01 | 000,333,192 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2009/12/02 08:53:00 | 000,028,424 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2009/12/02 08:52:52 | 000,025,608 | ---- | M] (AVG Technologies ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\AVGIDSxx.sys -- (AVGIDSErHrxpx)
DRV - [2009/12/02 08:52:51 | 000,161,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\System32\Drivers\avgrkx86.sys -- (AvgRkx86)
DRV - [2009/12/02 08:52:27 | 000,122,376 | ---- | M] (AVG Technologies ) [Kernel | On_Demand | Stopped] -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys -- (AVGIDSDriverxpx)
DRV - [2009/12/02 08:52:27 | 000,030,216 | ---- | M] (AVG Technologies ) [Kernel | On_Demand | Stopped] -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys -- (AVGIDSFilterxpx)
DRV - [2009/12/02 08:52:26 | 000,025,736 | ---- | M] (AVG Technologies ) [Kernel | On_Demand | Stopped] -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys -- (AVGIDSShimxpx)
DRV - [2009/12/02 08:52:10 | 000,030,104 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avgfwdx.sys -- (Avgfwfd)
DRV - [2009/12/02 08:52:10 | 000,030,104 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avgfwdx.sys -- (Avgfwdx)
DRV - [2009/09/23 16:10:06 | 000,207,280 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/07/20 14:39:04 | 000,339,456 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
DRV - [2008/08/20 12:58:58 | 000,044,944 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2008/04/02 14:15:26 | 006,008,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2008/01/25 23:35:04 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008/01/25 15:26:26 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2007/06/06 11:51:04 | 000,161,792 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2004/08/12 16:45:54 | 000,137,728 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2001/08/23 07:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [1997/12/22 20:02:46 | 000,023,936 | ---- | M] (Adaptec) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\aspi32.sys -- (Aspi32)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Yoog Search"
FF - prefs.js..browser.search.defaulturl: "http://www27.yoog.com/search.php?q="
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..browser.search.selectedEngine: "Yoog Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www27.yoog.com/"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.716
FF - prefs.js..extensions.enabledItems: {4176DFF4-4698-11DE-BEEB-45DA55D89593}:0.7.3
FF - prefs.js..extensions.enabledItems: anycolor.pavlos256@gmail.com:0.3.1
FF - prefs.js..extensions.enabledItems: {0545b830-f0aa-4d7e-8820-50a4629a56fe}:4.3
FF - prefs.js..extensions.enabledItems: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:0.9.10.2
FF - prefs.js..extensions.enabledItems: foxsaver@www.foxsaver.com:2.2.7.5
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: firefox@kidzui.com:0.8
FF - prefs.js..extensions.enabledItems: textlinks@playsushi.com:1.2.0
FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5
FF - prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.63
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.8
FF - prefs.js..extensions.enabledItems: {71398870-486b-11de-8a39-0800200c9a66}:1.0b1
FF - prefs.js..keyword.URL: "http://www27.yoog.com/search.php?q="
FF - user.js..browser.startup.homepage: "http://www27.yoog.com/"
FF - user.js..browser.search.selectedEngine: "Yoog Search"
FF - user.js..keyword.URL: "http://www27.yoog.com/search.php?q="
FF - user.js..keyword.enabled: true
FF - user.js..browser.search.defaultenginename: "Yoog Search"
FF - user.js..browser.search.defaulturl: "http://www27.yoog.com/search.php?q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Documents and Settings\All Users\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2009/07/04 05:25:32 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2009/12/10 17:02:07 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/02/27 12:12:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/02/27 11:40:48 | 000,000,000 | ---D | M]
[2010/02/01 16:55:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Extensions
[2010/02/01 16:55:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2010/03/01 19:29:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions
[2010/02/23 08:51:53 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2010/02/28 10:27:47 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}
[2009/09/24 10:19:17 | 000,000,000 | ---D | M] (Googlepedia) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{1ABADB6E-DC4B-11DA-9F70-791A9CD9513E}
[2009/08/03 16:12:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/12/01 03:42:12 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/01/31 10:25:35 | 000,000,000 | ---D | M] (AniWeather) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{4176DFF4-4698-11DE-BEEB-45DA55D89593}
[2010/02/23 08:51:49 | 000,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
[2010/02/26 22:45:12 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{517ca167-b6e8-4397-a0b4-a0074bbe3d5b}
[2010/02/04 04:04:56 | 000,000,000 | ---D | M] (Speed Dial) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}
[2010/02/04 04:04:45 | 000,000,000 | ---D | M] (Free Game Bar Toolbar) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{6f094b04-2c69-4ff3-ac74-d9716e97e296}
[2009/07/19 07:24:20 | 000,000,000 | ---D | M] (Prince of Persia) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{71398870-486b-11de-8a39-0800200c9a66}
[2010/02/23 08:51:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}
[2010/02/05 06:57:45 | 000,000,000 | ---D | M] (FoxTab) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
[2009/10/31 21:17:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\anycolor.pavlos256@gmail.com
[2009/11/12 18:11:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\firefox@kidzui.com
[2010/02/23 08:51:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\foxsaver@www.foxsaver.com
[2009/06/22 19:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\iaplayer@instantaction(2).com
[2009/07/01 14:47:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\smarterwiki@wikiatic(2).com
[2009/07/01 14:47:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\smarterwiki@wikiatic.com
[2010/02/26 22:44:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\extensions\textlinks@playsushi.com
[2009/07/11 05:20:35 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\searchplugins\ask.xml
[2009/06/15 19:43:04 | 000,009,949 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\searchplugins\mywebsearch.xml
[2009/11/19 04:24:23 | 000,002,797 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\searchplugins\world-of-warcraft-armory.xml
[2009/07/07 15:14:57 | 000,000,242 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\aszanres.default\searchplugins\Yoog Search.xml
[2010/03/01 19:29:36 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
O1 HOSTS File: ([2001/08/23 07:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Freecause Toolbar BHO) - {399C60D2-38B1-4E25-B9E7-6498C1BC2DCD} - C:\Program Files\Dogpile Toolbar\Toolbar.dll File not found
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Dogpile Toolbar) - {C53FE659-316A-4F56-A194-A5BE491BE866} - C:\Program Files\Dogpile Toolbar\Toolbar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Dogpile Toolbar) - {C53FE659-316A-4F56-A194-A5BE491BE866} - C:\Program Files\Dogpile Toolbar\Toolbar.dll File not found
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DrvIcon] C:\Program Files\Vista Drive Icon\DrvIcon.exe (artArmin)
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\point32.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
O4 - HKCU..\Run: [DellSupport] C:\Program Files\Dell Support\DSAgnt.exe (Gteko Ltd.)
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKLM..\RunOnceEx: [] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe (Eastman Kodak Company)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe ()
O4 - Startup: C:\Documents and Settings\user\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O4 - Startup: C:\Documents and Settings\user\Start Menu\Programs\Startup\LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe (Lime Wire, LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} http://a.download.toontown.com/sv1.0.39.5/ttinst.cab (Toontown Installer ActiveX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Escape%20Rosecliff%20Island/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5808/mcfscan.cab (McFreeScan Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.73.246 68.87.71.230
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (sevenui.exe) - C:\WINDOWS\System32\sevenui.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/05/31 11:21:27 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/05/08 14:43:55 | 000,000,046 | RH-- | M] () - D:\autorun.inf -- [ UDF ]
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\Installer.exe -- [2009/05/08 14:43:55 | 001,599,224 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010/03/01 19:49:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\SUPERAntiSpyware.com
[2010/03/01 15:46:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2010/03/01 15:45:08 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/03/01 07:15:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\TheScruffs
[2010/02/28 19:22:18 | 005,115,824 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\user\My Documents\mbam-setup.exe
[2010/02/28 18:44:06 | 001,640,400 | ---- | C] (Threat Expert Ltd.) -- C:\WINDOWS\PCTBDCore.dll
[2010/02/28 18:44:06 | 000,165,840 | ---- | C] (Threat Expert Ltd.) -- C:\WINDOWS\PCTBDRes.dll
[2010/02/28 18:44:06 | 000,149,456 | ---- | C] (PC Tools) -- C:\WINDOWS\SGDetectionTool.dll
[2010/02/28 18:42:03 | 000,233,136 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctgntdi.sys
[2010/02/28 18:41:54 | 000,207,280 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\PCTCore.sys
[2010/02/28 18:41:54 | 000,087,784 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\PCTAppEvent.sys
[2010/02/28 18:41:44 | 000,070,408 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctplsg.sys
[2010/02/28 18:41:34 | 000,000,000 | ---D | C] -- C:\Program Files\Spyware Doctor
[2010/02/28 18:41:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2010/02/28 18:41:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\PC Tools
[2010/02/28 18:41:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PC Tools
[2010/02/28 18:33:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Malwarebytes
[2010/02/28 18:33:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/02/28 18:33:12 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/02/28 18:33:12 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/02/28 18:33:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/02/28 18:32:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\My Documents\Malwarebytes_Anti-Malware_1.44
[2010/02/28 17:09:52 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2010/02/28 12:45:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\AVG8
[2010/02/28 08:35:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\opcdjm
[2010/02/26 19:41:44 | 061,395,832 | ---- | C] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\user\My Documents\R132886.EXE
[2010/02/26 19:37:31 | 008,254,544 | ---- | C] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\All Users\Documents\R132312.EXE
[2010/02/26 19:35:25 | 003,086,672 | ---- | C] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\All Users\Documents\R135875.EXE
[2010/02/26 19:30:01 | 002,948,504 | ---- | C] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\All Users\Documents\ddup1280.exe
[2010/02/26 19:26:11 | 010,585,496 | ---- | C] (Dell ) -- C:\Documents and Settings\All Users\Documents\DS321PCTweb.exe
[2010/02/25 07:12:36 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Toolbar Installer
[2010/02/25 07:12:12 | 000,000,000 | ---D | C] -- C:\Program Files\Shockwave.com
[2010/02/24 20:11:29 | 000,000,000 | ---D | C] -- C:\Program Files\5 Spots
[2010/02/19 07:09:11 | 000,000,000 | ---D | C] -- C:\Program Files\Curse
[2010/01/31 05:31:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Deployment
[2010/01/02 08:36:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/01/02 08:36:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/01/02 08:36:18 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/01/02 08:36:18 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/11/25 21:56:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2009/07/08 16:08:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2009/07/08 15:55:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010/03/01 20:32:10 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/03/01 20:31:34 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/03/01 20:30:48 | 002,883,584 | ---- | M] () -- C:\Documents and Settings\user\ntuser.dat
[2010/03/01 20:30:42 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\user\ntuser.ini
[2010/03/01 20:30:40 | 002,624,656 | -H-- | M] () -- C:\Documents and Settings\user\Local Settings\Application Data\IconCache.db
[2010/03/01 20:25:26 | 000,146,982 | ---- | M] () -- C:\Documents and Settings\user\Desktop\otl_0.55.tar.gz
[2010/03/01 20:24:00 | 000,146,982 | ---- | M] () -- C:\Documents and Settings\user\My Documents\otl_0.55.tar.gz
[2010/03/01 18:28:35 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/03/01 18:22:18 | 000,149,932 | ---- | M] () -- C:\logfile
[2010/03/01 18:07:24 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/03/01 15:45:32 | 000,000,796 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/03/01 09:10:14 | 000,000,759 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\World of Warcraft.lnk
[2010/03/01 08:23:18 | 056,483,219 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/03/01 08:11:40 | 000,001,100 | ---- | M] () -- C:\WINDOWS\System32\d3d8caps.dat
[2010/02/28 20:20:14 | 000,054,016 | ---- | M] () -- C:\WINDOWS\System32\drivers\jbhguh.sys
[2010/02/28 19:27:12 | 000,000,714 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/02/28 19:22:22 | 005,115,824 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\user\My Documents\mbam-setup.exe
[2010/02/28 18:41:50 | 000,001,643 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Spyware Doctor.lnk
[2010/02/28 18:31:00 | 008,761,532 | ---- | M] () -- C:\Documents and Settings\user\My Documents\Malwarebytes_Anti-Malware_1.44.zip
[2010/02/28 17:51:49 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/02/27 11:40:49 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/02/26 21:08:47 | 207,465,552 | ---- | M] () -- C:\Documents and Settings\user\My Documents\Wave-Systems-Corp_EMBASSY-Tr_A04_R217281.exe
[2010/02/26 21:08:43 | 024,762,824 | ---- | M] () -- C:\Documents and Settings\user\My Documents\R132539.exe
[2010/02/26 21:06:06 | 001,549,800 | ---- | M] () -- C:\Documents and Settings\user\My Documents\R260009.exe
[2010/02/26 21:05:53 | 002,852,424 | ---- | M] () -- C:\Documents and Settings\user\My Documents\R220296.exe
[2010/02/26 21:05:32 | 005,761,160 | ---- | M] () -- C:\Documents and Settings\user\My Documents\R161008.EXE
[2010/02/26 21:05:07 | 012,150,160 | ---- | M] () -- C:\Documents and Settings\user\My Documents\R161013.EXE
[2010/02/26 21:03:46 | 008,747,008 | ---- | M] () -- C:\Documents and Settings\user\My Documents\My Downloads List4.ISO
[2010/02/26 19:43:23 | 078,240,680 | ---- | M] () -- C:\Documents and Settings\user\My Documents\R215191.EXE
[2010/02/26 19:43:06 | 000,720,622 | ---- | M] () -- C:\Documents and Settings\user\My Documents\O745-263.exe
[2010/02/26 19:42:54 | 018,400,360 | ---- | M] () -- C:\Documents and Settings\user\My Documents\R189424.exe
[2010/02/26 19:42:40 | 061,395,832 | ---- | M] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\user\My Documents\R132886.EXE
[2010/02/26 19:41:29 | 076,181,328 | ---- | M] () -- C:\Documents and Settings\user\My Documents\AMD_RADEON-HD-2400-XT_A05_R179781.exe
[2010/02/26 19:40:29 | 008,828,928 | ---- | M] () -- C:\Documents and Settings\user\My Documents\OPGA5.iso
[2010/02/26 19:40:16 | 008,828,928 | ---- | M] () -- C:\Documents and Settings\user\My Documents\OUGA5.iso
[2010/02/26 19:39:45 | 001,549,800 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R260009.exe
[2010/02/26 19:39:44 | 094,233,336 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\Dell_multi-device_A17_R174291.exe
[2010/02/26 19:39:39 | 002,852,424 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R220296.exe
[2010/02/26 19:38:30 | 005,761,160 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R161008.EXE
[2010/02/26 19:38:05 | 012,150,160 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R161013.EXE
[2010/02/26 19:37:38 | 008,254,544 | ---- | M] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\All Users\Documents\R132312.EXE
[2010/02/26 19:37:02 | 001,904,904 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R151799.EXE
[2010/02/26 19:35:29 | 003,086,672 | ---- | M] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\All Users\Documents\R135875.EXE
[2010/02/26 19:35:17 | 034,628,826 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R164210.exe
[2010/02/26 19:34:28 | 356,389,787 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R149559.exe
[2010/02/26 19:30:05 | 002,948,504 | ---- | M] (Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com) -- C:\Documents and Settings\All Users\Documents\ddup1280.exe
[2010/02/26 19:29:52 | 003,892,272 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\CW1337A0.exe
[2010/02/26 19:29:06 | 000,274,064 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R133527.exe
[2010/02/26 19:28:51 | 024,762,824 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R132539.exe
[2010/02/26 19:28:03 | 012,123,816 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\R243724.exe
[2010/02/26 19:26:19 | 010,585,496 | ---- | M] (Dell ) -- C:\Documents and Settings\All Users\Documents\DS321PCTweb.exe
[2010/02/24 21:56:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/02/24 18:58:01 | 000,568,347 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\iavifw.avm
[2010/02/24 05:35:31 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/02/19 07:10:44 | 000,001,540 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Curse Client.lnk
[2010/02/05 09:25:38 | 000,070,408 | ---- | M] (PC Tools) -- C:\WINDOWS\System32\drivers\pctplsg.sys
[2010/02/05 09:17:56 | 000,233,136 | ---- | M] (PC Tools) -- C:\WINDOWS\System32\drivers\pctgntdi.sys
[2010/02/02 03:21:31 | 000,000,219 | ---- | M] () -- C:\Documents and Settings\user\My Documents\tunein-station.pls
[2010/02/01 16:55:44 | 000,001,536 | ---- | M] () -- C:\Documents and Settings\user\Start Menu\Programs\Startup\LimeWire On Startup.lnk
[2010/02/01 00:41:26 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\user\Start Menu\Programs\Startup\CurseClientStartup.ccip
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010/03/01 20:25:26 | 000,146,982 | ---- | C] () -- C:\Documents and Settings\user\Desktop\otl_0.55.tar.gz
[2010/03/01 15:45:32 | 000,000,796 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/02/28 20:50:15 | 000,146,982 | ---- | C] () -- C:\Documents and Settings\user\My Documents\otl_0.55.tar.gz
[2010/02/28 20:20:14 | 000,054,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\jbhguh.sys
[2010/02/28 18:44:07 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2010/02/28 18:44:06 | 001,152,444 | ---- | C] () -- C:\WINDOWS\UDB.zip
[2010/02/28 18:44:06 | 000,000,882 | ---- | C] () -- C:\WINDOWS\RegSDImport.xml
[2010/02/28 18:44:06 | 000,000,880 | ---- | C] () -- C:\WINDOWS\RegISSImport.xml
[2010/02/28 18:44:06 | 000,000,131 | ---- | C] () -- C:\WINDOWS\IDB.zip
[2010/02/28 18:42:03 | 000,007,387 | ---- | C] () -- C:\WINDOWS\System32\drivers\pctgntdi.cat
[2010/02/28 18:41:54 | 000,007,412 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCTAppEvent.cat
[2010/02/28 18:41:54 | 000,007,383 | ---- | C] () -- C:\WINDOWS\System32\drivers\pctcore.cat
[2010/02/28 18:41:50 | 000,001,643 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Spyware Doctor.lnk
[2010/02/28 18:41:44 | 000,007,383 | ---- | C] () -- C:\WINDOWS\System32\drivers\pctplsg.cat
[2010/02/28 18:33:16 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/02/28 18:31:00 | 008,761,532 | ---- | C] () -- C:\Documents and Settings\user\My Documents\Malwarebytes_Anti-Malware_1.44.zip
[2010/02/27 11:40:48 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/02/26 21:08:09 | 024,762,824 | ---- | C] () -- C:\Documents and Settings\user\My Documents\R132539.exe
[2010/02/26 21:06:19 | 207,465,552 | ---- | C] () -- C:\Documents and Settings\user\My Documents\Wave-Systems-Corp_EMBASSY-Tr_A04_R217281.exe
[2010/02/26 21:06:03 | 001,549,800 | ---- | C] () -- C:\Documents and Settings\user\My Documents\R260009.exe
[2010/02/26 21:05:49 | 002,852,424 | ---- | C] () -- C:\Documents and Settings\user\My Documents\R220296.exe
[2010/02/26 21:05:06 | 005,761,160 | ---- | C] () -- C:\Documents and Settings\user\My Documents\R161008.EXE
[2010/02/26 21:04:58 | 012,150,160 | ---- | C] () -- C:\Documents and Settings\user\My Documents\R161013.EXE
[2010/02/26 21:03:45 | 008,747,008 | ---- | C] () -- C:\Documents and Settings\user\My Documents\My Downloads List4.ISO
[2010/02/26 19:43:02 | 000,720,622 | ---- | C] () -- C:\Documents and Settings\user\My Documents\O745-263.exe
[2010/02/26 19:42:25 | 018,400,360 | ---- | C] () -- C:\Documents and Settings\user\My Documents\R189424.exe
[2010/02/26 19:42:06 | 078,240,680 | ---- | C] () -- C:\Documents and Settings\user\My Documents\R215191.EXE
[2010/02/26 19:40:42 | 076,181,328 | ---- | C] () -- C:\Documents and Settings\user\My Documents\AMD_RADEON-HD-2400-XT_A05_R179781.exe
[2010/02/26 19:40:22 | 008,828,928 | ---- | C] () -- C:\Documents and Settings\user\My Documents\OPGA5.iso
[2010/02/26 19:40:09 | 008,828,928 | ---- | C] () -- C:\Documents and Settings\user\My Documents\OUGA5.iso
[2010/02/26 19:39:43 | 001,549,800 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R260009.exe
[2010/02/26 19:39:29 | 002,852,424 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R220296.exe
[2010/02/26 19:38:45 | 094,233,336 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\Dell_multi-device_A17_R174291.exe
[2010/02/26 19:38:26 | 005,761,160 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R161008.EXE
[2010/02/26 19:37:57 | 012,150,160 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R161013.EXE
[2010/02/26 19:36:59 | 001,904,904 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R151799.EXE
[2010/02/26 19:35:00 | 034,628,826 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R164210.exe
[2010/02/26 19:30:31 | 356,389,787 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R149559.exe
[2010/02/26 19:29:48 | 003,892,272 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\CW1337A0.exe
[2010/02/26 19:29:05 | 000,274,064 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R133527.exe
[2010/02/26 19:28:38 | 024,762,824 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R132539.exe
[2010/02/26 19:27:55 | 012,123,816 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\R243724.exe
[2010/02/19 07:09:14 | 000,001,540 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Curse Client.lnk
[2010/02/02 03:21:31 | 000,000,219 | ---- | C] () -- C:\Documents and Settings\user\My Documents\tunein-station.pls
[2010/02/01 16:55:44 | 000,001,536 | ---- | C] () -- C:\Documents and Settings\user\Start Menu\Programs\Startup\LimeWire On Startup.lnk
[2010/02/01 05:22:25 | 000,154,992 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2010/02/01 00:41:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\user\Start Menu\Programs\Startup\CurseClientStartup.ccip
[2010/01/03 18:20:01 | 000,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2009/11/17 08:08:06 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\ddres.dll
[2009/11/17 08:08:05 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\expiry.dll
[2009/08/14 06:03:24 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009/07/04 06:24:33 | 000,000,018 | ---- | C] () -- C:\WINDOWS\gfact.ini
[2009/07/02 14:19:21 | 000,000,052 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2009/07/01 15:01:41 | 000,004,946 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\mtbjfghn.xbe
[2009/06/29 13:42:46 | 000,000,042 | ---- | C] () -- C:\WINDOWS\System32\Painter.ini
[2009/05/31 16:57:13 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2009/05/31 16:39:49 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4943.dll
========== Alternate Data Streams ==========
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E91ADC66
@Alternate Data Stream - 155 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 154 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1B7DADD8
@Alternate Data Stream - 138 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D4B86AEF
@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3EAC9BB2
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AD6127BD
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:512B5648
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:93D985FC
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:41B3EF33
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FD537E5A
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:291F3023
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BEACDB69
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8BB2EC84
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:71B781E2
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:753A0081
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F24DA723
< End of report >