GeekPolice
Would you like to react to this message? Create an account in a few clicks or log in to continue.

GeekPoliceLog in

 


disabled task manager virus

2 posters

descriptiondisabled task manager virus Emptydisabled task manager virus29th February 2012, 4:57 am

more_horiz
I already tried running a virus scan and tried to trouble shoot through microsoft, but after the fix, task manager is still unable to open. I ran a malwarebytes scan and it detected and deleted five malicious files. A week later I ran AVG and it detected and deleted 31,000 plus malicious files. I hope I provided everything needed, but if not I would be happy to run the other scans. Thank you for all your hard work.

OTL logfile created on: 2/28/2012 11:43:36 PM - Run 1
OTL by OldTimer - Version 3.2.33.1 Folder = C:\Documents and Settings\owner\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1015.43 Mb Total Physical Memory | 584.92 Mb Available Physical Memory | 57.60% Memory free
1.64 Gb Paging File | 1.33 Gb Available in Paging File | 80.97% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 26.77 Gb Free Space | 71.84% Space Free | Partition Type: NTFS
Drive D: | 76.75 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: COMPUTER_1 | User Name: owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found --
PRC - [2012/02/28 23:42:55 | 000,583,168 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\owner\My Documents\Downloads\OTL (1).com
PRC - [2008/04/13 23:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005/07/08 16:24:46 | 000,871,424 | ---- | M] (Nero AG) -- C:\Program Files\Ahead\InCD\InCDsrv.exe
PRC - [2005/07/08 09:25:10 | 001,397,760 | ---- | M] (Nero AG) -- C:\Program Files\Ahead\InCD\InCD.exe
PRC - [2003/12/08 16:35:14 | 000,110,592 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe


========== Modules (No Company Name) ==========

MOD - [2008/04/13 23:42:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 23:41:52 | 000,059,904 | ---- | M] () -- C:\WINDOWS\system32\devenum.dll


========== Win32 Services (SafeList) ==========

SRV - [2005/07/08 16:24:46 | 000,871,424 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Ahead\InCD\InCDsrv.exe -- (InCDsrv)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Running] -- -- (abp470n5)
DRV - [2009/08/26 17:10:26 | 000,213,544 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2008/04/14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008/04/13 22:06:08 | 000,084,480 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ac97via.sys -- (VIAudio) VIA AC'97 Audio Controller (WDM)
DRV - [2007/05/15 00:03:24 | 000,445,696 | R--- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2005/07/08 16:17:54 | 000,099,584 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2005/07/08 16:17:36 | 000,029,696 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDpass.sys -- (InCDPass)
DRV - [2005/07/08 09:17:32 | 000,028,672 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\InCDrm.sys -- (incdrm)
DRV - [2003/12/05 04:46:36 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: {e917fc61-7f80-4f1f-a882-cdffffbe4c8d} - C:\Program Files\D-Link Toolbar\dlinktb.dll (AOL LLC.)

IE - HKCU\..\URLSearchHook: {e917fc61-7f80-4f1f-a882-cdffffbe4c8d} - C:\Program Files\D-Link Toolbar\dlinktb.dll (AOL LLC.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.com/"

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\owner\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)


[2012/01/23 09:42:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\owner\Application Data\Mozilla\Extensions

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\gcswf32.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.8.0.8855_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.8.0.8855_0\
CHR - Extension: Gmail = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2007/08/11 01:58:33 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (D-Link Toolbar Loader) - {f01858c7-2a68-4d93-9e22-502eae3917c2} - C:\Program Files\D-Link Toolbar\dlinktb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (D-Link Toolbar) - {61874dfa-9adf-44e5-8e61-f3913707e7d7} - C:\Program Files\D-Link Toolbar\dlinktb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (D-Link Toolbar) - {61874DFA-9ADF-44E5-8E61-F3913707E7D7} - C:\Program Files\D-Link Toolbar\dlinktb.dll (AOL LLC.)
O4 - HKLM..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [RemoteControl] C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil11e_ActiveX.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4D135591-CD16-495A-AA49-004315F92913}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxsrvc.dll) - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/10/17 21:40:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/12/24 21:56:28 | 000,208,896 | R--- | M] () - D:\Autome.exe -- [ CDFS ]
O32 - AutoRun File - [2007/02/23 14:34:16 | 000,004,277 | R--- | M] () - D:\autorun.apm -- [ CDFS ]
O32 - AutoRun File - [2003/11/20 20:01:00 | 000,995,328 | R--- | M] (Indigo Rose Corporation) - D:\autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2004/10/13 20:07:18 | 000,000,318 | R--- | M] () - D:\autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2007/01/27 03:00:38 | 000,000,049 | R--- | M] () - D:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{5b61f3e6-2660-11e1-bb5d-001185b1f647}\Shell - "" = AutoRun
O33 - MountPoints2\{5b61f3e6-2660-11e1-bb5d-001185b1f647}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{5b61f3e6-2660-11e1-bb5d-001185b1f647}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Setup.exe
O33 - MountPoints2\{a2fc9764-f938-11e0-af0b-001185b1f647}\Shell\AUtOPLay\CommAND - "" = E:\lgovik.pif
O33 - MountPoints2\{a2fc9764-f938-11e0-af0b-001185b1f647}\Shell\AutoRun\command - "" = E:\lgovik.pif
O33 - MountPoints2\{a2fc9764-f938-11e0-af0b-001185b1f647}\Shell\exPLorE\coMmand - "" = E:\lgovik.pif
O33 - MountPoints2\{a2fc9764-f938-11e0-af0b-001185b1f647}\Shell\OPen\ComMand - "" = E:\lgovik.pif
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/02/28 23:41:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Desktop\tools
[2012/02/28 16:21:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Application Data\AVG
[2012/02/28 16:20:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2012/02/28 16:20:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\AVG PC Tuneup 2011
[2012/02/28 16:20:03 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2012/02/14 15:40:45 | 000,445,696 | R--- | C] (Ralink Technology, Corp.) -- C:\WINDOWS\System32\drivers\rt73.sys
[2012/02/12 13:46:28 | 000,000,000 | ---D | C] -- C:\Program Files\iolo
[2012/02/12 13:46:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Application Data\iolo
[2012/02/12 13:46:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\iolo
[2012/02/12 11:45:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Application Data\Malwarebytes
[2012/02/12 11:42:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/02/12 11:42:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2012/02/12 11:42:58 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012/02/12 11:42:58 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/02/12 11:34:38 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy
[2012/02/10 18:19:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Start Menu\Programs\Google Chrome
[2012/02/07 09:38:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Local Settings\Application Data\Solid State Networks
[2012/02/03 19:23:17 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\owner\IECompatCache
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/02/28 23:27:00 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-1004336348-1606980848-1003UA.job
[2012/02/28 22:27:00 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-1004336348-1606980848-1003Core.job
[2012/02/28 19:40:37 | 000,000,440 | RHS- | M] () -- C:\Documents and Settings\owner\ntuser.pol
[2012/02/28 16:20:16 | 000,000,368 | ---- | M] () -- C:\WINDOWS\tasks\AVG PC Tuneup Integrator Start On owner Logon.job
[2012/02/28 16:20:07 | 000,000,813 | ---- | M] () -- C:\Documents and Settings\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AVG PC Tuneup 2011.lnk
[2012/02/28 16:20:07 | 000,000,795 | ---- | M] () -- C:\Documents and Settings\owner\Desktop\AVG PC Tuneup 2011.lnk
[2012/02/28 11:47:42 | 000,314,508 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/02/28 11:47:42 | 000,040,836 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/02/28 11:43:44 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/02/28 11:43:35 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/02/28 10:09:58 | 000,507,723 | ---- | M] () -- C:\Documents and Settings\owner\Desktop\DCarley-Resume-2012 (1).pdf
[2012/02/17 04:21:38 | 000,264,616 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/17 03:15:42 | 000,000,118 | ---- | M] () -- C:\WINDOWS\System32\MRT.INI
[2012/02/17 03:02:24 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/02/17 01:29:04 | 000,002,284 | ---- | M] () -- C:\Documents and Settings\owner\Desktop\Google Chrome.lnk
[2012/02/17 01:29:04 | 000,002,262 | ---- | M] () -- C:\Documents and Settings\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/02/12 13:46:32 | 000,000,828 | ---- | M] () -- C:\Documents and Settings\owner\Desktop\System Checkup.lnk
[2012/02/12 11:43:00 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/02/28 16:20:16 | 000,000,368 | ---- | C] () -- C:\WINDOWS\tasks\AVG PC Tuneup Integrator Start On owner Logon.job
[2012/02/28 16:20:07 | 000,000,813 | ---- | C] () -- C:\Documents and Settings\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AVG PC Tuneup 2011.lnk
[2012/02/28 16:20:07 | 000,000,795 | ---- | C] () -- C:\Documents and Settings\owner\Desktop\AVG PC Tuneup 2011.lnk
[2012/02/28 10:11:03 | 000,507,723 | ---- | C] () -- C:\Documents and Settings\owner\Desktop\DCarley-Resume-2012 (1).pdf
[2012/02/17 03:15:42 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2012/02/16 14:57:39 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/02/16 14:57:39 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/02/12 13:46:32 | 000,000,828 | ---- | C] () -- C:\Documents and Settings\owner\Desktop\System Checkup.lnk
[2012/02/12 11:43:00 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/02/12 11:35:21 | 000,000,440 | RHS- | C] () -- C:\Documents and Settings\owner\ntuser.pol
[2012/02/10 18:19:23 | 000,002,284 | ---- | C] () -- C:\Documents and Settings\owner\Desktop\Google Chrome.lnk
[2012/02/10 18:19:23 | 000,002,262 | ---- | C] () -- C:\Documents and Settings\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/10/17 21:56:11 | 000,110,592 | ---- | C] () -- C:\Program Files\Uninstall_CDS.exe
[2011/10/17 21:42:56 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011/10/17 21:37:11 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2011/10/17 17:31:12 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011/10/17 17:30:02 | 000,264,616 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

========== Alternate Data Streams ==========

@Alternate Data Stream - 139 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4

< End of report >

OTL Extras logfile created on: 2/28/2012 11:43:36 PM - Run 1
OTL by OldTimer - Version 3.2.33.1 Folder = C:\Documents and Settings\owner\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1015.43 Mb Total Physical Memory | 584.92 Mb Available Physical Memory | 57.60% Memory free
1.64 Gb Paging File | 1.33 Gb Available in Paging File | 80.97% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 26.77 Gb Free Space | 71.84% Space Free | Partition Type: NTFS
Drive D: | 76.75 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: COMPUTER_1 | User Name: owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 1
"FirewallOverride" = 1
"UacDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"FirewallOverride" = 1
"UpdatesDisableNotify" = 1
"UacDisableNotify" = 1

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"E:\NX5000...Video.exe" = E:\NX5000...Video.exe:*:Enabled:ipsec
"C:\WINDOWS\system32\NeroCheck.exe" = C:\WINDOWS\system32\NeroCheck.exe:*:Enabled:ipsec -- (Ahead Software Gmbh)
"C:\WINDOWS\Explorer.EXE" = C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec -- (Microsoft Corporation)
"C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" = C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe:*:Enabled:ipsec -- (Cyberlink Corp.)
"C:\WINDOWS\system32\SNDVOL32.EXE" = C:\WINDOWS\system32\SNDVOL32.EXE:*:Enabled:ipsec -- (Microsoft Corporation)
"C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" = C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe:*:Enabled:ipsec -- (Google Inc.)
"C:\DOCUME~1\owner\LOCALS~1\Temp\winbyad.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winbyad.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winfdun.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winfdun.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\ngoyee.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\ngoyee.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\swiqth.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\swiqth.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winogsle.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winogsle.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\cvirsk.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\cvirsk.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\fapi.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\fapi.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winshas.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winshas.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winhqcnk.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winhqcnk.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winmoisg.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winmoisg.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\ftiqg.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\ftiqg.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winjxln.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winjxln.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\pprrj.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\pprrj.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winbhcclv.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winbhcclv.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\ldobev.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\ldobev.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winehvp.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winehvp.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\jwfp.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\jwfp.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winglmuc.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winglmuc.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\gnka.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\gnka.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winypeblt.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winypeblt.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\cyrmr.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\cyrmr.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winuftoeq.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winuftoeq.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\gxglh.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\gxglh.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\qpbto.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\qpbto.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\kdlu.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\kdlu.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winaxnxad.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winaxnxad.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\vouo.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\vouo.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\windlevq.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\windlevq.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\wintvker.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\wintvker.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winindywq.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winindywq.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winhewkra.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winhewkra.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winxjusg.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winxjusg.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winscpold.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winscpold.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\windwxndn.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\windwxndn.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\wahoj.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\wahoj.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winqpyu.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winqpyu.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winuwgqg.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winuwgqg.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winehys.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winehys.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\ldas.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\ldas.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winxxoqhj.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winxxoqhj.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winxsok.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winxsok.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winqrkgt.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winqrkgt.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\wingfwj.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\wingfwj.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\cyouuw.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\cyouuw.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winyrktw.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winyrktw.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winnljxe.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winnljxe.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winbcgrbu.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winbcgrbu.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winamqaeq.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winamqaeq.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winfauw.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winfauw.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winemhchs.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winemhchs.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winsopkr.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winsopkr.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winxvgnba.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winxvgnba.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winivtur.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winivtur.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\qumgv.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\qumgv.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winakwasa.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winakwasa.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winytar.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winytar.exe:*:Enabled:ipsec
"C:\DOCUME~1\owner\LOCALS~1\Temp\winhkoiyq.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winhkoiyq.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\owner\LOCALS~1\Temp\winenbp.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winenbp.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\owner\LOCALS~1\Temp\winysob.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\winysob.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\owner\LOCALS~1\Temp\xcsshs.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\xcsshs.exe:*:Enabled:ipsec -- ()
"C:\DOCUME~1\owner\LOCALS~1\Temp\ithp.exe" = C:\DOCUME~1\owner\LOCALS~1\Temp\ithp.exe:*:Enabled:ipsec -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = Multimedia Launcher
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1" = System Checkup 3.1
"{50316C0A-CC2A-460A-9EA5-F486E54AC17D}_is1" = AVG PC Tuneup
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{926CC8AE-8414-43DF-8EB4-CF26D9C3C663}" =
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{B97CF5C3-0487-11D8-A36E-0050BAE317E1}" = DVD Solution
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"D-Link Toolbar" = D-Link Toolbar
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ie8" = Windows Internet Explorer 8
"InCD!UninstallKey" = InCD
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.60.1.1000
"Nero - Burning Rom!UninstallKey" = Nero OEM
"SoftwareUpdUtility" = Download Updater (AOL LLC)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2/10/2012 7:51:42 PM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.46, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/12/2012 11:53:37 AM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.46, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/14/2012 6:23:53 PM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 2/15/2012 11:23:21 AM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.46, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/15/2012 4:39:04 PM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.46, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/15/2012 10:01:47 PM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.46, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/22/2012 4:15:21 PM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.56, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/23/2012 9:31:57 PM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.56, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/28/2012 11:56:25 AM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.56, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 2/28/2012 12:40:20 PM | Computer Name = COMPUTER_1 | Source = Application Hang | ID = 1002
Description = Hanging application chrome.exe, version 17.0.963.56, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.


< End of report >

descriptiondisabled task manager virus EmptyRe: disabled task manager virus29th February 2012, 7:12 am

more_horiz
Hi there jMag and welcome to GeekPolice!

I am Gabethebabe and I will be helping you with this issue. Before we start some general remarks/rules:
  • Whilst I´m helping you, please follow my instructions carefully and do not experiment on your own or accept help from other persons.
  • Feel free to ask questions! Especially if my instructions are not clear. I´m here to help, not confuse you.
  • I will try and respond quickly, but please understand I do have a real life (job, wife, 3 kids, kinky hobbies).
  • Stick with me till the end. If your computer starts running better, doesn´t mean it is clean yet!

====================

Please download CKScanner by askey127 from here and save it to your desktop.

  • Doubleclick CKScanner.exe and click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify that the file is saved.
  • Please copy the contents of the CKFiles.txt file on your desktop and paste it into your next reply.



privacy_tip Permissions in this forum:
You cannot reply to topics in this forum