Items:
jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems:
moveplayer@movenetworks.com:1.0.0.071101000055
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.6.20090220
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..keyword.URL: "http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZJman000&fl=0&ptb=skS_GJhJZuHe5S6Cn1o01w&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=kwd&searchfor="
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/05/05 11:54:07 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/05/03 09:14:25 | 000,000,000 | ---D | M]
[2008/08/28 10:44:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WELCOME TO XP (2008)\Application Data\Mozilla\Extensions
[2010/05/16 13:21:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WELCOME TO XP (2008)\Application Data\Mozilla\Firefox\Profiles\hjam782d.default\extensions
[2010/02/14 20:34:30 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\WELCOME TO XP (2008)\Application Data\Mozilla\Firefox\Profiles\hjam782d.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/01/10 16:09:17 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\WELCOME TO XP (2008)\Application Data\Mozilla\Firefox\Profiles\hjam782d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/01/27 18:46:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WELCOME TO XP (2008)\Application Data\Mozilla\Firefox\Profiles\hjam782d.default\extensions\moveplayer@movenetworks.com
[2009/10/12 17:43:20 | 000,009,941 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\Application Data\Mozilla\Firefox\Profiles\hjam782d.default\searchplugins\mywebsearch.xml
[2010/05/16 13:21:01 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/04/22 08:42:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/04/12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009/08/04 12:10:47 | 000,001,210 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\search.xml
O1 HOSTS File: ([2010/05/11 18:54:41 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (PopupBlockerBHO.CPopupBlockerBHO) - {0D929918-C804-4756-B0AC-640EF3F061E9} - C:\Program Files\SmartPopupBlocker\PopupBlockerBHO.dll (aa)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\ShellBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Version Cue CS2] C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe (Adobe Sytems Incorporated)
O4 - HKLM..\Run: [vptray] C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKCU..\Run: [IDriveE Startup] C:\Program Files\IDrive\IDrvieEStartup.exe (Pro Softnet Corporation)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk = File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe ()
O4 - Startup: C:\Documents and Settings\WELCOME TO XP (2008)\Start Menu\Programs\Startup\IDrive Tray.lnk = C:\Program Files\IDrive\IDriveEReg2ini.exe (Pro Softnet Corp.)
O4 - Startup: C:\Documents and Settings\WELCOME TO XP (2008)\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: Append to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9}
file://C:\Program Files\Elf Bowling Holiday Pack\Images\stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54}
file://C:\Program Files\Elf Bowling Holiday Pack\Images\armhelper.ocx (ArmHelper Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.15.1
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\NavLogon: DllName - C:\WINDOWS\system32\NavLogon.dll - C:\WINDOWS\system32\NavLogon.dll ()
O24 - Desktop WallPaper: C:\Documents and Settings\WELCOME TO XP (2008)\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\WELCOME TO XP (2008)\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/26 19:04:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ========== [2010/05/15 15:50:28 | 000,000,000 | --SD | C] -- C:\Combo-Fix12162C
[2010/05/15 07:16:28 | 000,000,000 | --SD | C] -- C:\Combo-Fix3795C
[2010/05/14 19:54:17 | 000,000,000 | --SD | C] -- C:\Combo-Fix10570C
[2010/05/14 12:53:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Help
[2010/05/14 12:53:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Help
[2010/05/14 08:29:23 | 000,000,000 | --SD | C] -- C:\Combo-Fix5532C
[2010/05/13 20:09:19 | 000,000,000 | --SD | C] -- C:\Combo-Fix24437C
[2010/05/13 19:56:26 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/05/13 19:56:26 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/05/13 19:56:26 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/05/13 19:56:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/05/13 19:55:58 | 000,000,000 | --SD | C] -- C:\Combo-Fix
[2010/05/13 19:37:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/05/12 17:25:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\WELCOME TO XP (2008)\Application Data\Malwarebytes
[2010/05/12 17:25:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/05/12 17:25:12 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/05/12 17:25:12 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/05/12 17:25:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/05/11 18:52:51 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/05/10 18:50:34 | 000,570,880 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\OTL.exe
[2010/05/03 09:13:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2010/04/22 08:42:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/04/22 08:42:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/04/22 08:42:26 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/04/22 08:42:26 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/04/22 08:42:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/04/22 08:42:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[19 C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\*.tmp files -> C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/05/17 17:00:00 | 000,000,516 | ---- | M] () -- C:\WINDOWS\tasks\1-Click Maintenance.job
[2010/05/17 14:23:36 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/05/17 14:07:23 | 002,697,216 | R--- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2010/05/17 14:07:18 | 001,891,328 | R--- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mb
[2010/05/17 14:05:18 | 000,002,337 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
[2010/05/17 14:04:19 | 000,000,480 | ---- | M] () -- C:\WINDOWS\tasks\EasyShare Registration RunOnce Task.job
[2010/05/17 14:02:24 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/05/17 14:02:02 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/05/17 14:01:55 | 1064,353,792 | -HS- | M] () -- C:\hiberfil.sys
[2010/05/17 12:03:46 | 006,029,312 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\NTUSER.DAT
[2010/05/17 12:03:46 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\ntuser.ini
[2010/05/17 09:06:04 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/05/16 09:54:17 | 003,676,403 | ---- | M] () -- C:\EasyShare.dmp
[2010/05/15 15:39:14 | 003,689,423 | R--- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\Combo-Fix.exe
[2010/05/15 13:24:53 | 000,201,728 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\BofA-LaQuinta-Dispute-3-15-10.-pg2.doc
[2010/05/15 13:24:21 | 000,030,208 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\BofA-LaQuinta-Dispute-3-15-10.doc
[2010/05/15 11:31:27 | 000,037,465 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\For claim.docx
[2010/05/14 08:26:43 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/05/13 00:10:24 | 000,028,587 | ---- | M] () -- C:\WINDOWS\System32\TUProgSt_20100513-061024.dmp
[2010/05/12 17:25:16 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/05/12 06:14:16 | 000,000,118 | ---- | M] () -- C:\WINDOWS\System32\MRT.INI
[2010/05/11 18:54:41 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010/05/11 10:14:05 | 000,028,587 | ---- | M] () -- C:\WINDOWS\System32\TUProgSt_20100511-161405.dmp
[2010/05/10 18:52:14 | 000,000,479 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\Shortcut to OTL.lnk
[2010/05/10 18:50:46 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\OTL.exe
[2010/05/10 12:58:39 | 000,028,587 | ---- | M] () -- C:\WINDOWS\System32\TUProgSt_20100510-185839.dmp
[2010/05/09 19:24:38 | 000,027,137 | ---- | M] () -- C:\WINDOWS\System32\TUProgSt_20100510-012438.dmp
[2010/05/09 11:48:41 | 000,027,137 | ---- | M] () -- C:\WINDOWS\System32\TUProgSt_20100509-174841.dmp
[2010/05/08 15:40:15 | 000,005,877 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\Juggler Mike.jpg
[2010/05/07 11:49:01 | 000,026,563 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\Yoga types.docx
[2010/05/06 10:36:38 | 000,221,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2010/05/03 23:57:22 | 000,027,137 | ---- | M] () -- C:\WINDOWS\System32\TUProgSt_20100504-055722.dmp
[2010/05/03 09:14:12 | 000,001,604 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/04/29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/04/29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/04/26 15:58:12 | 000,256,512 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2010/04/24 22:25:22 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\RECEIPT FOR RENT.doc
[2010/04/20 16:19:27 | 001,200,640 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\Email-SignUp-Sheet-2009-10.pub
[2010/04/17 19:06:25 | 000,147,451 | ---- | M] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\Orion story.docx
[19 C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\*.tmp files -> C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/05/15 15:39:41 | 003,689,423 | R--- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\Combo-Fix.exe
[2010/05/15 13:24:51 | 000,201,728 | ---- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\BofA-LaQuinta-Dispute-3-15-10.-pg2.doc
[2010/05/15 11:31:20 | 000,037,465 | ---- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\For claim.docx
[2010/05/15 10:26:10 | 000,030,208 | ---- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\BofA-LaQuinta-Dispute-3-15-10.doc
[2010/05/15 07:23:49 | 1064,353,792 | -HS- | C] () -- C:\hiberfil.sys
[2010/05/13 19:56:26 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/05/13 19:56:26 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/05/13 19:56:26 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/05/13 19:56:26 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/05/13 00:10:24 | 000,028,587 | ---- | C] () -- C:\WINDOWS\System32\TUProgSt_20100513-061024.dmp
[2010/05/12 17:25:16 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/05/12 06:14:16 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2010/05/11 10:14:05 | 000,028,587 | ---- | C] () -- C:\WINDOWS\System32\TUProgSt_20100511-161405.dmp
[2010/05/11 09:52:57 | 000,007,207 | ---- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\hs_err_pid2796.log
[2010/05/10 18:52:14 | 000,000,479 | ---- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\Shortcut to OTL.lnk
[2010/05/10 12:58:39 | 000,028,587 | ---- | C] () -- C:\WINDOWS\System32\TUProgSt_20100510-185839.dmp
[2010/05/09 19:24:38 | 000,027,137 | ---- | C] () -- C:\WINDOWS\System32\TUProgSt_20100510-012438.dmp
[2010/05/09 11:48:41 | 000,027,137 | ---- | C] () -- C:\WINDOWS\System32\TUProgSt_20100509-174841.dmp
[2010/05/08 15:40:14 | 000,005,877 | ---- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\Desktop\Juggler Mike.jpg
[2010/05/07 11:24:20 | 000,026,563 | ---- | C] () -- C:\Documents and Settings\WELCOME TO XP (2008)\My Documents\Yoga types.docx
[2010/05/03 23:57:22 | 000,027,137 | ---- | C] () -- C:\WINDOWS\System32\TUProgSt_20100504-055722.dmp
[2010/05/03 09:14:12 | 000,001,604 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2009/09/09 20:20:21 | 000,055,808 | ---- | C] () -- C:\WINDOWS\System32\zlib1.dll
[2009/09/09 20:20:20 | 000,441,705 | ---- | C] () -- C:\WINDOWS\System32\sqlite3.dll
[2008/09/02 00:07:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\DVEdit.INI
[2008/08/29 15:11:29 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\trc.dll
[2008/08/29 15:11:13 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\IcdSptSvps.dll
[2008/08/29 15:11:12 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\dsp_trc.dll
[2008/08/01 16:18:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Dvm.INI
[2008/07/21 20:34:47 | 000,000,054 | ---- | C] () -- C:\WINDOWS\VistaEmail.ini
[2008/03/15 13:27:23 | 000,565,248 | R--- | C] () -- C:\WINDOWS\System32\hpotscl.dll
[2008/03/04 19:03:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI
[2008/03/02 13:43:11 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2008/03/02 06:02:26 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2004/08/27 11:50:59 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/08/26 17:12:43 | 000,000,465 | ---- | C] () -- C:\WINDOWS\System32\emver.ini
[2004/08/26 17:12:43 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2002/07/30 13:33:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\NavLogon.dll
[2000/09/08 18:53:50 | 000,073,839 | ---- | C] () -- C:\WINDOWS\System32\KodakOneTouch.dll
========== Alternate Data Streams ========== @Alternate Data Stream - 94 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E7EE4FA3
@Alternate Data Stream - 146 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:550179F5
@Alternate Data Stream - 141 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AC0FFFAF
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BF4BA1F5
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:86FA1A34
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:26566B27
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FB5DB76D
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:888AFB86
< End of report >