Solved Iexplore virus (random internet ads pop-up)

[Resolved] Iexplore virus (random internet ads pop-up)

My internet (Firefox and/or explorer) doesn't allow me to go to pages sometimes, random ads pop-up including audio ones, there's usually two iexplore.exe's open, and three rundll32.exe's open. I have Windows Vista and I will post my hijack-this log. Any help is very appreciated!

------------------------------------------------
[HJT log removed - Broni]

 

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18975

12/15/2010 10:33:04 PM
mbam-log-2010-12-15 (22-33-04).txt

Scan type: Quick scan
Objects scanned: 117454
Time elapsed: 6 minute(s), 39 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 3
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 5

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\woaqwqga (Rogue.AntivirusSuite.Gen) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\asam (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\asam (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop Defender 2010 (Rogue.DesktopDefender2010) -> Quarantined and deleted successfully.

Files Infected:
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop Defender 2010\Activate Desktop Defender 2010.lnk (Rogue.DesktopDefender2010) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop Defender 2010\Desktop Defender 2010.lnk (Rogue.DesktopDefender2010) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop Defender 2010\Help.lnk (Rogue.DesktopDefender2010) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop Defender 2010\How to Activate Desktop Defender 2010.lnk (Rogue.DesktopDefender2010) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desktop Defender 2010.LNK (Rogue.DesktopDefender2010) -> Quarantined and deleted successfully.
-----------------------------------------------------
GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2010-12-15 23:22:40
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST9120822AS rev.3.ALC
Running: yiyluuws.exe; Driver: C:\Users\purin\AppData\Local\Temp\pwlcapod.sys


---- Kernel code sections - GMER 1.0.15 ----

? System32\drivers\ekeff.sys The system cannot find the path specified. !

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs AsDsm.sys (Data Security Manager Driver/Windows (R) Codename Longhorn DDK provider)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat InCDrec.SYS (InCD File System Recognizer/Nero AG)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\0018f337f16b
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001d60c67e2f
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\0018f337f16b (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001d60c67e2f (not active ControlSet)

---- Files - GMER 1.0.15 ----

File C:\ADSM_PData_0150 0 bytes
File C:\ADSM_PData_0150\DB 0 bytes
File C:\ADSM_PData_0150\DB\SI.db 624 bytes
File C:\ADSM_PData_0150\DB\UL.db 16 bytes
File C:\ADSM_PData_0150\DB\VL.db 16 bytes
File C:\ADSM_PData_0150\DB\_avt 512 bytes
File C:\ADSM_PData_0150\DragWait.exe 253952 bytes executable
File C:\ADSM_PData_0150\_avt 512 bytes
File C:\Program Files\ASUS\ASUS Data Security Manager\driver\x86 0 bytes
File C:\Program Files\ASUS\ASUS Data Security Manager\driver\x86\AsDsm.sys 29752 bytes executable
File C:\Program Files\ASUS\ASUS Data Security Manager\driver\x86\_avt 512 bytes

---- EOF - GMER 1.0.15 ----
------------------------------------------------------
MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 2 (build 6002), 32-bit
Base Board Manufacturer: ASUSTeK Computer Inc.
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: ASUSTeK Computer Inc.
System Product Name: F3Ka
Logical Drives Mask: 0x0000001c

Kernel Drivers (total 158):
0x81E01000 \SystemRoot\system32\ntkrnlpa.exe
0x821BA000 \SystemRoot\system32\hal.dll
0x80401000 \SystemRoot\system32\kdcom.dll
0x80408000 \SystemRoot\system32\PSHED.dll
0x80419000 \SystemRoot\system32\BOOTVID.dll
0x80421000 \SystemRoot\system32\CLFS.SYS
0x80462000 \SystemRoot\system32\CI.dll
0x80542000 \SystemRoot\System32\drivers\ekeff.sys
0x80550000 \SystemRoot\system32\drivers\Wdf01000.sys
0x805CC000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x8060F000 \SystemRoot\system32\drivers\acpi.sys
0x80655000 \SystemRoot\system32\drivers\WMILIB.SYS
0x8065E000 \SystemRoot\system32\drivers\msisadrv.sys
0x80666000 \SystemRoot\system32\drivers\pci.sys
0x8068D000 \SystemRoot\System32\drivers\partmgr.sys
0x8069C000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x8069F000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x806A9000 \SystemRoot\system32\drivers\volmgr.sys
0x806B8000 \SystemRoot\System32\drivers\volmgrx.sys
0x80702000 \SystemRoot\system32\drivers\pciide.sys
0x80709000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x80717000 \SystemRoot\System32\drivers\mountmgr.sys
0x80727000 \SystemRoot\system32\drivers\atapi.sys
0x8072F000 \SystemRoot\system32\drivers\ataport.SYS
0x8074D000 \SystemRoot\system32\drivers\fltmgr.sys
0x8077F000 \SystemRoot\system32\drivers\fileinfo.sys
0x8078F000 \SystemRoot\System32\Drivers\AsDsm.sys
0x8A002000 \SystemRoot\System32\Drivers\ksecdd.sys
0x8A073000 \SystemRoot\system32\drivers\ndis.sys
0x8A17E000 \SystemRoot\system32\drivers\msrpc.sys
0x8A1A9000 \SystemRoot\system32\drivers\NETIO.SYS
0x8A203000 \SystemRoot\System32\drivers\tcpip.sys
0x8A2ED000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x8A409000 \SystemRoot\System32\Drivers\Ntfs.sys
0x8A519000 \SystemRoot\system32\drivers\volsnap.sys
0x8A552000 \SystemRoot\System32\Drivers\spldr.sys
0x8A55A000 \SystemRoot\System32\Drivers\mup.sys
0x8A569000 \SystemRoot\System32\drivers\ecache.sys
0x8A590000 \SystemRoot\system32\drivers\disk.sys
0x8A5A1000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x8A5C2000 \SystemRoot\system32\drivers\crcdisk.sys
0x8A5EB000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x8A5F6000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x8A400000 \SystemRoot\system32\DRIVERS\ATKACPI.sys
0x8A308000 \SystemRoot\system32\DRIVERS\amdk8.sys
0x8FE0D000 \SystemRoot\system32\DRIVERS\atikmdag.sys
0x90535000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x905D6000 \SystemRoot\System32\drivers\watchdog.sys
0x8A318000 \SystemRoot\system32\DRIVERS\Rtlh86.sys
0x90808000 \SystemRoot\system32\DRIVERS\athr.sys
0x908F8000 \SystemRoot\system32\DRIVERS\usbohci.sys
0x90902000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x90940000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x9094F000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x90967000 \SystemRoot\system32\drivers\InCDPass.sys
0x9096F000 \SystemRoot\system32\drivers\InCDRm.sys
0x90978000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
0x8A33A000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x9097E000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x90991000 \SystemRoot\system32\DRIVERS\kbfiltr.sys
0x90993000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x9099E000 \SystemRoot\system32\DRIVERS\Apfiltr.sys
0x909C6000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x909D1000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x909E1000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x905E2000 \SystemRoot\system32\DRIVERS\sdbus.sys
0x909EF000 \SystemRoot\system32\DRIVERS\rimmptsk.sys
0x8A3C7000 \SystemRoot\system32\DRIVERS\rimsptsk.sys
0x80799000 \SystemRoot\system32\DRIVERS\rixdptsk.sys
0x90800000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x90E03000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x90E32000 \SystemRoot\system32\DRIVERS\storport.sys
0x90E73000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x90E7E000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x90E95000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x90EA0000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x90EC3000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x90ED2000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x90EE6000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x90EFB000 \SystemRoot\system32\DRIVERS\termdd.sys
0x90F0B000 \SystemRoot\system32\DRIVERS\swenum.sys
0x90F0D000 \SystemRoot\system32\DRIVERS\ks.sys
0x90F37000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x90F41000 \SystemRoot\system32\DRIVERS\umbus.sys
0x90F4E000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x90F83000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x91201000 \SystemRoot\system32\drivers\RTKVHDA.sys
0x90F94000 \SystemRoot\system32\drivers\portcls.sys
0x90FC1000 \SystemRoot\system32\drivers\drmk.sys
0x91408000 \SystemRoot\system32\DRIVERS\smserial.sys
0x914F8000 \SystemRoot\system32\drivers\modem.sys
0x91505000 \SystemRoot\system32\drivers\MODEMCSA.sys
0x9150F000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x91518000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x91528000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x9152F000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x91531000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x91548000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x91550000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x91601000 \SystemRoot\system32\DRIVERS\snp2uvc.sys
0x917AB000 \SystemRoot\system32\DRIVERS\STREAM.SYS
0x917B8000 \SystemRoot\system32\DRIVERS\sncduvc.SYS
0x917BF000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x917C8000 \SystemRoot\System32\Drivers\Null.SYS
0x917CF000 \SystemRoot\System32\Drivers\Beep.SYS
0x917D6000 \SystemRoot\System32\drivers\vga.sys
0x91559000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x917E2000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x917EA000 \SystemRoot\system32\drivers\rdpencdd.sys
0x917F2000 \SystemRoot\System32\Drivers\InCDrec.SYS
0x9157A000 \SystemRoot\system32\drivers\InCDFs.sys
0x917F5000 \SystemRoot\System32\Drivers\Msfs.SYS
0x91594000 \SystemRoot\System32\Drivers\Npfs.SYS
0x915A2000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x915AB000 \SystemRoot\system32\DRIVERS\tdx.sys
0x915C1000 \SystemRoot\system32\DRIVERS\smb.sys
0x91A0E000 \SystemRoot\system32\drivers\afd.sys
0x91A56000 \SystemRoot\System32\DRIVERS\netbt.sys
0x91A88000 \SystemRoot\system32\DRIVERS\pacer.sys
0x91A9E000 \SystemRoot\system32\DRIVERS\netbios.sys
0x91AAC000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x91ABF000 \SystemRoot\System32\Drivers\SCDEmu.SYS
0x91ACC000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x91B08000 \SystemRoot\system32\drivers\nsiproxy.sys
0x91B12000 \SystemRoot\System32\Drivers\dfsc.sys
0x91B29000 \SystemRoot\System32\Drivers\crashdmp.sys
0x91B36000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x91B41000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x99CD0000 \SystemRoot\System32\win32k.sys
0x91B49000 \SystemRoot\System32\drivers\Dxapi.sys
0x91B53000 \SystemRoot\system32\DRIVERS\monitor.sys
0x99EF0000 \SystemRoot\System32\TSDDD.dll
0x99F10000 \SystemRoot\System32\cdd.dll
0x91B62000 \SystemRoot\system32\drivers\luafv.sys
0x9F40C000 \SystemRoot\system32\drivers\spsys.sys
0x9F4BC000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x9F4CC000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x9F4F6000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x9F500000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x9F513000 \SystemRoot\system32\drivers\HTTP.sys
0x9F580000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x9F59D000 \SystemRoot\system32\DRIVERS\bowser.sys
0x9F5B6000 \SystemRoot\System32\drivers\mpsdrv.sys
0x9F5CB000 \SystemRoot\system32\drivers\mrxdav.sys
0x91B85000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x91BA4000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x91BDD000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x915D5000 \SystemRoot\System32\DRIVERS\srv2.sys
0xA0402000 \SystemRoot\System32\DRIVERS\srv.sys
0xA0450000 \SystemRoot\System32\Drivers\fastfat.SYS
0xA0478000 \SystemRoot\system32\drivers\peauth.sys
0xA0556000 \SystemRoot\System32\Drivers\secdrv.SYS
0xA0560000 \SystemRoot\System32\drivers\tcpipreg.sys
0xA056C000 \SystemRoot\system32\DRIVERS\cdfs.sys
0xA0582000 \??\C:\Program Files\Clarus\Samsung SecretZone\mvd20.sys
0xA0595000 \??\C:\Program Files\Clarus\Samsung SecretZone\mdf15.sys
0xA059E000 \??\C:\Users\purin\AppData\Local\Temp\pwlcapod.sys
0x77550000 \Windows\System32\ntdll.dll

Processes (total 73):
0 System Idle Process
4 System
556 C:\Windows\System32\smss.exe
676 csrss.exe
724 C:\Windows\System32\wininit.exe
744 csrss.exe
780 C:\Windows\System32\services.exe
808 C:\Windows\System32\winlogon.exe
824 C:\Windows\System32\lsass.exe
836 C:\Windows\System32\lsm.exe
996 C:\Windows\System32\svchost.exe
1056 C:\Windows\System32\svchost.exe
1096 C:\Windows\System32\svchost.exe
1132 C:\Windows\System32\Ati2evxx.exe
1192 C:\Windows\System32\svchost.exe
1228 C:\Windows\System32\svchost.exe
1284 C:\Windows\System32\svchost.exe
1364 C:\Windows\System32\audiodg.exe
1388 C:\Windows\System32\svchost.exe
1452 C:\Windows\System32\SLsvc.exe
1500 C:\Windows\System32\svchost.exe
1644 C:\Windows\System32\svchost.exe
1744 C:\Windows\System32\Ati2evxx.exe
1772 C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
1856 C:\Windows\System32\spoolsv.exe
1936 C:\Windows\System32\svchost.exe
352 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
632 C:\Windows\System32\svchost.exe
668 C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
1652 C:\Program Files\Common Files\LightScribe\LSSrvc.exe
1984 C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe
972 C:\Windows\System32\svchost.exe
568 C:\Windows\System32\svchost.exe
2060 C:\Windows\System32\PnkBstrA.exe
2080 C:\Windows\System32\PnkBstrB.exe
2120 C:\Windows\System32\svchost.exe
2144 C:\Windows\System32\svchost.exe
2220 C:\Windows\System32\svchost.exe
2252 C:\Windows\System32\SearchIndexer.exe
2688 C:\Windows\System32\taskeng.exe
2768 C:\Windows\System32\taskeng.exe
1576 C:\Windows\System32\dwm.exe
2292 C:\Windows\explorer.exe
3220 C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
2320 C:\Windows\RtHDVCpl.exe
3280 C:\Program Files\ASUS\ATK Media\DMedia.exe
3240 C:\Program Files\Apoint2K\Apoint.exe
3284 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
2856 C:\Program Files\iTunes\iTunesHelper.exe
3172 C:\Program Files\ContourStoryteller\ContourAutoplay.exe
3308 C:\Windows\ehome\ehtray.exe
2828 C:\Program Files\Windows Media Player\wmpnscfg.exe
3148 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
3084 C:\Program Files\Windows Media Player\wmpnetwk.exe
3452 C:\Program Files\Apoint2K\ApMsgFwd.exe
1332 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
3868 C:\Program Files\Apoint2K\hidfind.exe
3896 C:\Program Files\Apoint2K\ApntEx.exe
3976 C:\Windows\ehome\ehmsas.exe
4016 C:\Windows\System32\wuauclt.exe
3944 C:\Program Files\Apoint2K\Apvfb.exe
1968 C:\Program Files\iPod\bin\iPodService.exe
3336 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
3992 C:\Program Files\Mozilla Firefox\firefox.exe
3920 C:\Program Files\Internet Explorer\iexplore.exe
2560 C:\Program Files\Internet Explorer\iexplore.exe
1468 C:\Windows\System32\rundll32.exe
176 C:\Program Files\Mozilla Firefox\plugin-container.exe
3916 C:\Program Files\Internet Explorer\iexplore.exe
2348 C:\Windows\System32\SearchProtocolHost.exe
1608 C:\Windows\System32\SearchFilterHost.exe
2820 C:\Users\purin\Desktop\MBRCheck.exe
2936 C:\Windows\System32\conime.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000001`b5900000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x0000000f`aee00000 (NTFS)

PhysicalDrive0 Model Number: ST9120822AS, Rev: 3.ALC

Size Device Name MBR Status
--------------------------------------------
111 GB \\.\PhysicalDrive0 Unknown MBR code
SHA1: 16FACB29D75458833E397367B1DA17929157C2B3


Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:
----------------------------------------------------

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft® Windows Vistaâ„¢ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 11/14/2007 11:04:02 PM
System Uptime: 12/15/2010 10:34:15 PM (1 hours ago)

Motherboard: ASUSTeK Computer Inc. | | F3Ka
Processor: AMD Turion(tm) 64 X2 Mobile Technology TL-58 | CPU 1 | 1900/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 56 GiB total, 10.971 GiB free.
D: is FIXED (NTFS) - 49 GiB total, 9.224 GiB free.
E: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1123: 12/13/2010 10:22:54 PM - Windows Update
RP1124: 12/14/2010 2:24:01 AM - Windows Update
RP1125: 12/15/2010 3:00:24 AM - Windows Update
RP1126: 12/15/2010 7:49:29 PM - Scheduled Checkpoint
RP1127: 12/15/2010 9:16:14 PM - Windows Update

==== Installed Programs ======================

µTorrent
2007 Microsoft Office system
32 Bit HP CIO Components Installer
Activation Assistant for the 2007 Microsoft Office suites
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.2.5
ALPS Touch Pad Driver
AMP Calendar
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ASUS Data Security Manager
ASUS InstantFun
ASUS Live Update
ASUS Splendid Video Enhancement Technology
Asus_Camera_ScreenSaver
Atheros Driver Installation Program
ATI Catalyst Install Manager
ATK Generic Function Service
ATK Hotkey
ATK Media
ATKOSD2
Battlefield 2(TM)
Bonjour
Call of Duty(R) 2
Call of Duty(R) 2 Patch 1.3
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center Localization Chinese Standard
Catalyst Control Center Localization Chinese Traditional
Catalyst Control Center Localization Czech
Catalyst Control Center Localization Danish
Catalyst Control Center Localization Dutch
Catalyst Control Center Localization Finnish
Catalyst Control Center Localization French
Catalyst Control Center Localization German
Catalyst Control Center Localization Greek
Catalyst Control Center Localization Hungarian
Catalyst Control Center Localization Italian
Catalyst Control Center Localization Japanese
Catalyst Control Center Localization Korean
Catalyst Control Center Localization Norwegian
Catalyst Control Center Localization Polish
Catalyst Control Center Localization Portuguese
Catalyst Control Center Localization Russian
Catalyst Control Center Localization Spanish
Catalyst Control Center Localization Swedish
Catalyst Control Center Localization Thai
Catalyst Control Center Localization Turkish
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Contour Storyteller
DivX Web Player
EPSON Printer Software
Google Toolbar for Internet Explorer
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iTunes
Java(TM) 6 Update 17
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) 6 Update 7
K-Lite Codec Pack 6.5.0 (Basic)
LG USB Modem Drivers
LifeFrame2
LightScribe 1.4.142.1
Live 8.1.1
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (Chinese (Simplified)) 2007
Microsoft Office Access MUI (Chinese (Traditional)) 2007
Microsoft Office Access MUI (English) 2007
Microsoft Office Access MUI (French) 2007
Microsoft Office Access MUI (Spanish) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel 2007 Help ¸Ã¼Ã (KB963678)
Microsoft Office Excel 2007 Help Actualización (KB963678)
Microsoft Office Excel 2007 Help §Ã³·sµ{¦¡ (KB963678)
Microsoft Office Excel MUI (Chinese (Simplified)) 2007
Microsoft Office Excel MUI (Chinese (Traditional)) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Excel MUI (French) 2007
Microsoft Office Excel MUI (Spanish) 2007
Microsoft Office Home and Student 2007
Microsoft Office IME (Chinese (Simplified)) 2007
Microsoft Office IME (Chinese (Traditional)) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook 2007 Help ¸Ã¼Ã (KB963677)
Microsoft Office Outlook 2007 Help Actualización (KB963677)
Microsoft Office Outlook MUI (Chinese (Simplified)) 2007
Microsoft Office Outlook MUI (Chinese (Traditional)) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office Outlook MUI (French) 2007
Microsoft Office Outlook MUI (Spanish) 2007
Microsoft Office Powerpoint 2007 Help ¸Ã¼Ã (KB963669)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669)
Microsoft Office Powerpoint 2007 Help §Ã³·sµ{¦¡ (KB963669)
Microsoft Office PowerPoint MUI (Chinese (Simplified)) 2007
Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint MUI (French) 2007
Microsoft Office PowerPoint MUI (Spanish) 2007
Microsoft Office Professional Hybrid 2007
Microsoft Office Proof (Arabic) 2007
Microsoft Office Proof (Basque) 2007
Microsoft Office Proof (Catalan) 2007
Microsoft Office Proof (Chinese (Simplified)) 2007
Microsoft Office Proof (Chinese (Traditional)) 2007
Microsoft Office Proof (Dutch) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Galician) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Portuguese (Brazil)) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (Chinese (Simplified)) 2007
Microsoft Office Proofing (Chinese (Traditional)) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing (French) 2007
Microsoft Office Proofing (Spanish) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (Chinese (Simplified)) 2007
Microsoft Office Publisher MUI (Chinese (Traditional)) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Publisher MUI (French) 2007
Microsoft Office Publisher MUI (Spanish) 2007
Microsoft Office Shared MUI (Chinese (Simplified)) 2007
Microsoft Office Shared MUI (Chinese (Traditional)) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (French) 2007
Microsoft Office Shared MUI (Spanish) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word 2007 Help ¸Ã¼Ã (KB963665)
Microsoft Office Word 2007 Help Actualización (KB963665)
Microsoft Office Word 2007 Help §Ã³·sµ{¦¡ (KB963665)
Microsoft Office Word MUI (Chinese (Simplified)) 2007
Microsoft Office Word MUI (Chinese (Traditional)) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Office Word MUI (French) 2007
Microsoft Office Word MUI (Spanish) 2007
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Mise à jour Microsoft Office Excel 2007 Help (KB963678)
Mise à jour Microsoft Office Outlook 2007 Help (KB963677)
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)
Mise à jour Microsoft Office Word 2007 Help (KB963665)
Motorola SM56 Speakerphone Modem
Mozilla Firefox (3.6.13)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 7 Essentials
OGA Notifier 2.0.0048.0
OpenOffice.org 2.3
Power4Gear eXtreme
PowerForPhone
PowerISO
QuickTime
Ragnarok Online
RealPlayer
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
Realtek High Definition Audio Driver
Rhapsody Player Engine
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
Samsung SecretZone
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2289158)
Security Update for 2007 Microsoft Office System (KB2344875)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2345035)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
Security Update for Microsoft Office Publisher 2007 (KB982124)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Skins
Spybot - Search & Destroy
Unlocker 1.8.9
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (KB2443839)
USB 2.0 1.3M UVC WebCam
V CAST Music with Rhapsody
VC80CRTRedist - 8.0.50727.762
Viewpoint Media Player
VistaFeaturePack
VLC media player 1.0.3
Winamp
WinFlash
WinRAR archiver
Wireless Console 2
Yahoo! Install Manager
Yahoo! Internet Mail

==== Event Viewer Messages From Past Week ========

12/15/2010 9:37:05 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:37:01 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
12/15/2010 9:36:48 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC NetBIOS netbt nsiproxy PSched RasAcd rdbss SCDEmu Smb spldr tdx Wanarpv6
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The WebDav Client Redirector Driver service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The WebClient service depends on the WebDav Client Redirector Driver service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service service which failed to start because of the following error: A device attached to the system is not functioning.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
12/15/2010 9:36:48 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
12/15/2010 9:36:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments " " in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
12/15/2010 9:36:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments " " in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
12/15/2010 9:36:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments " " in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
12/15/2010 9:36:16 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
12/15/2010 9:36:06 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments " " in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
12/15/2010 9:06:47 PM, Error: Microsoft-Windows-Windows Defender [2004] - Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted: Current Error Code: 0x8050a001 Error description: The program can't find definition files that help detect unwanted software. Check for updates to the definition files, and then try again. For information on installing updates, see Help and Support. Signatures loading: Backup Loading signature version: 1.95.1522.0 Loading engine version: 1.1.6402.0
12/15/2010 9:06:11 PM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
12/15/2010 9:05:18 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
12/15/2010 8:35:04 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
12/15/2010 8:34:34 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Media Player Network Sharing Service service to connect.
12/15/2010 8:34:34 PM, Error: Service Control Manager [7000] - The Windows Media Player Network Sharing Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The Virtual Disk Service Manager service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The spmgr service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The PnkBstrB service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The PnkBstrA service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The LightScribeService Direct Disc Labeling Service service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The InCD Helper service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The ATKGFNEX Service service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The ASLDR Service service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7034] - The ADSM Service service terminated unexpectedly. It has done this 1 time(s).
12/15/2010 8:34:04 PM, Error: Service Control Manager [7031] - The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
12/15/2010 8:34:04 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
12/15/2010 8:34:04 PM, Error: Microsoft-Windows-DistributedCOM [10000] - Unable to start a DCOM Server: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}. The error: "5" Happened while starting this command: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
12/15/2010 3:03:38 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
12/15/2010 3:03:38 AM, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/15/2010 3:03:38 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments " " in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
12/15/2010 10:36:16 PM, Error: Service Control Manager [7001] - The ATKGFNEX Service service depends on the ASMMAP service which failed to start because of the following error: The system cannot find the path specified.
12/15/2010 10:36:16 PM, Error: Service Control Manager [7000] - The spmgr service failed to start due to the following error: The system cannot find the file specified.
12/15/2010 10:36:16 PM, Error: Service Control Manager [7000] - The npkcrypt service failed to start due to the following error: The system cannot find the file specified.
12/15/2010 10:36:16 PM, Error: Service Control Manager [7000] - The MCSTRM service failed to start due to the following error: The system cannot find the file specified.
12/15/2010 10:36:16 PM, Error: Service Control Manager [7000] - The Bonjour Service service failed to start due to the following error: The system cannot find the path specified.
12/15/2010 10:36:16 PM, Error: Service Control Manager [7000] - The ASMMAP service failed to start due to the following error: The system cannot find the path specified.
12/15/2010 10:36:16 PM, Error: Service Control Manager [7000] - The ASLDR Service service failed to start due to the following error: The system cannot find the file specified.
12/15/2010 10:10:10 PM, Error: Service Control Manager [7034] - The Ati External Event Utility service terminated unexpectedly. It has done this 1 time(s).
12/14/2010 10:09:23 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.
12/13/2010 9:52:33 PM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Reboot the machine) after the unexpected termination of the DCOM Server Process Launcher service, but this action failed with the following error: A system shutdown has already been scheduled.
12/13/2010 9:52:33 PM, Error: Service Control Manager [7031] - The Plug and Play service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
12/13/2010 9:52:33 PM, Error: Service Control Manager [7031] - The DCOM Server Process Launcher service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
12/13/2010 3:23:02 PM, Error: atikmdag [43033] - Edid checksum error
12/13/2010 10:18:10 PM, Error: Microsoft-Windows-Windows Defender [2004] - Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted: Current Error Code: 0x8050a001 Error description: The program can't find definition files that help detect unwanted software. Check for updates to the definition files, and then try again. For information on installing updates, see Help and Support. Signatures loading: Backup Loading signature version: 1.95.1304.0 Loading engine version: 1.1.6402.0
12/13/2010 1:25:09 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service MSIServer with arguments " " in order to run the server: {000C101C-0000-0000-C000-000000000046}
12/13/2010 1:24:13 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments " " in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
12/13/2010 1:14:37 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {9E175B68-F52A-11D8-B9A5-505054503030}
12/10/2010 7:04:53 PM, Error: Service Control Manager [7022] - The Server service hung on starting.
12/10/2010 7:04:53 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: After starting, the service hung in a start-pending state.
12/10/2010 7:02:51 PM, Error: EventLog [6008] - The previous system shutdown at 7:00:01 PM on 12/10/2010 was unexpected.

==== End Of File ===========================

DDS (Ver_10-12-12.02) - NTFSx86
Run by purin at 23:26:51.27 on Wed 12/15/2010
Internet Explorer: 8.0.6001.18975 BrowserJavaVersion: 1.6.0_17
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6002.2.1252.1.1033.18.3070.1821 [GMT -6:00]

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Ati2evxx.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ContourStoryteller\ContourAutoplay.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Apoint2K\Apvfb.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\purin\Desktop\MBRCheck.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\purin\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
mDefault_Page_URL = hxxp://www.asus.com
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride = *.local
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe "
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [Microsoft Pinyin IME Migration] c:\progra~1\common~1\micros~1\ime12\imesc\IMSCMIG.EXE /INSTALL
mRun: [StartCCC] c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [Skytel] Skytel.exe
mRun: [ATKMEDIA] c:\program files\asus\atk media\DMEDIA.EXE
mRun: [Apoint] c:\program files\apoint2k\Apoint.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe "
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [UnlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe "
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [ContourCameraFinder] c:\program files\contourstoryteller\ContourAutoplay.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
DPF: {22945A69-1191-4DCF-9E6F-409BDE94D101} - hxxp://chil.solidworks.com/htdocs/pdownload/edrawings/e2008sp03/cab/eModelsStandard.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
AppInit_DLLs: crtrgwiz.dll inetpage10.dll
Hosts: 127.0.0.1 www.spywareinfo.com

================= FIREFOX ===================

FF - ProfilePath - c:\users\purin\appdata\roaming\mozilla\firefox\profiles\1anxne1t.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Move Media Player: moveplayer@movenetworks.com - %profile%\extensions\moveplayer@movenetworks.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\program files\real\realplayer\browserrecord\firefox\ext

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============

R2 MSR Service;Virtual Disk Service Manager;c:\program files\clarus\samsung secretzone\MSSvc.exe [2010-1-13 102400]
RUnknown mdf15;mdf15; [x]
RUnknown mvd20;mvd20; [x]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-6-25 21504]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

=============== Created Last 30 ================

2010-12-16 03:16:56 6273872 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{1cf948bd-2f47-4013-80e3-3d8ebc658b73}\mpengine.dll
2010-12-16 02:25:47 -------- d-----w- c:\progra~2\dCbOm06308
2010-12-13 19:52:36 -------- d-----w- c:\program files\Trend Micro
2010-12-10 23:19:42 478720 --sh--w- c:\windows\system32\crtrgwiz.dll
2010-12-10 23:19:35 62976 --sh--w- c:\windows\system32\inetpage10.dll
2010-12-10 16:42:45 165376 ----a-w- c:\windows\system32\unrar.dll
2010-12-10 16:42:32 -------- d-----w- c:\program files\ContourStoryteller
2010-11-24 00:31:57 7680 ----a-w- c:\program files\internet explorer\iecompat.dll

==================== Find3M ====================

2010-12-16 02:58:57 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-10-19 16:41:44 222080 ------w- c:\windows\system32\MpSigStub.exe

============= FINISH: 23:27:53.84 ===============

 

I got "Avast! ", updated it, ran scan. It found a virus and fixed it or blocked it.

---------------------------
Bootkit Remover
(c) 2009 eSage Lab
www.esagelab.com

Program version: 1.2.0.0
OS Version: Microsoft Windows Vista Home Premium Edition Service Pack 2 (build 6
002), 32-bit

System volume is \\.\C:
\\.\C: -> \\.\PhysicalDrive0 at offset 0x00000001`b5900000
Boot sector MD5 is: ce1f92f8dc2583dab8e491967abacde8

Size Device Name MBR Status
--------------------------------------------
111 GB \\.\PhysicalDrive0 Unknown boot code

Unknown boot code has been found on some of your physical disks.
To inspect the boot code manually, dump the master boot sector:
remover.exe dump <device_name> [output_file]
To disinfect the master boot sector, use the following command:
remover.exe fix <device_name>


Done;
Press any key to quit...

 

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 2 (build 6002), 32-bit
Base Board Manufacturer: ASUSTeK Computer Inc.
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: ASUSTeK Computer Inc.
System Product Name: F3Ka
Logical Drives Mask: 0x0000001c

Kernel Drivers (total 161):
0x81E4F000 \SystemRoot\system32\ntkrnlpa.exe
0x81E1C000 \SystemRoot\system32\hal.dll
0x80403000 \SystemRoot\system32\kdcom.dll
0x8040A000 \SystemRoot\system32\PSHED.dll
0x8041B000 \SystemRoot\system32\BOOTVID.dll
0x80423000 \SystemRoot\system32\CLFS.SYS
0x80464000 \SystemRoot\system32\CI.dll
0x80544000 \SystemRoot\system32\drivers\Wdf01000.sys
0x805C0000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x80605000 \SystemRoot\system32\drivers\acpi.sys
0x8064B000 \SystemRoot\system32\drivers\WMILIB.SYS
0x80654000 \SystemRoot\system32\drivers\msisadrv.sys
0x8065C000 \SystemRoot\system32\drivers\pci.sys
0x80683000 \SystemRoot\System32\drivers\partmgr.sys
0x80692000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x80695000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x8069F000 \SystemRoot\system32\drivers\volmgr.sys
0x806AE000 \SystemRoot\System32\drivers\volmgrx.sys
0x806F8000 \SystemRoot\system32\drivers\pciide.sys
0x806FF000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x8070D000 \SystemRoot\System32\drivers\mountmgr.sys
0x8071D000 \SystemRoot\system32\drivers\atapi.sys
0x80725000 \SystemRoot\system32\drivers\ataport.SYS
0x80743000 \SystemRoot\system32\drivers\fltmgr.sys
0x80775000 \SystemRoot\system32\drivers\fileinfo.sys
0x80785000 \SystemRoot\System32\Drivers\AsDsm.sys
0x8078F000 \SystemRoot\System32\Drivers\ksecdd.sys
0x89E02000 \SystemRoot\system32\drivers\ndis.sys
0x89F0D000 \SystemRoot\system32\drivers\msrpc.sys
0x89F38000 \SystemRoot\system32\drivers\NETIO.SYS
0x8A003000 \SystemRoot\System32\drivers\tcpip.sys
0x8A0ED000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x8A20E000 \SystemRoot\System32\Drivers\Ntfs.sys
0x8A31E000 \SystemRoot\system32\drivers\volsnap.sys
0x8A357000 \SystemRoot\System32\Drivers\spldr.sys
0x8A35F000 \SystemRoot\System32\Drivers\mup.sys
0x8A36E000 \SystemRoot\System32\drivers\ecache.sys
0x8A395000 \SystemRoot\system32\drivers\disk.sys
0x8A3A6000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x8A3C7000 \SystemRoot\system32\drivers\crcdisk.sys
0x8A3F0000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x8A200000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x8A108000 \SystemRoot\system32\DRIVERS\ATKACPI.sys
0x8A110000 \SystemRoot\system32\DRIVERS\amdk8.sys
0x8FA00000 \SystemRoot\system32\DRIVERS\atikmdag.sys
0x90128000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x901C9000 \SystemRoot\System32\drivers\watchdog.sys
0x901D5000 \SystemRoot\system32\DRIVERS\Rtlh86.sys
0x9040A000 \SystemRoot\system32\DRIVERS\athr.sys
0x904FA000 \SystemRoot\system32\DRIVERS\usbohci.sys
0x90504000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x90542000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x90551000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x90569000 \SystemRoot\system32\drivers\InCDPass.sys
0x90571000 \SystemRoot\system32\drivers\InCDRm.sys
0x9057A000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
0x8A120000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x90580000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x90593000 \SystemRoot\system32\DRIVERS\kbfiltr.sys
0x90595000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x905A0000 \SystemRoot\system32\DRIVERS\Apfiltr.sys
0x905C8000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x905D3000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x905E3000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x8A1AD000 \SystemRoot\system32\DRIVERS\sdbus.sys
0x905F1000 \SystemRoot\system32\DRIVERS\rimmptsk.sys
0x8A1C7000 \SystemRoot\system32\DRIVERS\rimsptsk.sys
0x89F73000 \SystemRoot\system32\DRIVERS\rixdptsk.sys
0x90400000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x89FC4000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x90A09000 \SystemRoot\system32\DRIVERS\storport.sys
0x90A4A000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x90A55000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x90A6C000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x90A77000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x90A9A000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x90AA9000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x90ABD000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x90AD2000 \SystemRoot\system32\DRIVERS\termdd.sys
0x90AE2000 \SystemRoot\system32\DRIVERS\swenum.sys
0x90AE4000 \SystemRoot\system32\DRIVERS\ks.sys
0x90B0E000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x90B18000 \SystemRoot\system32\DRIVERS\umbus.sys
0x90B25000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x90B5A000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x90C0A000 \SystemRoot\system32\drivers\RTKVHDA.sys
0x90B6B000 \SystemRoot\system32\drivers\portcls.sys
0x90B98000 \SystemRoot\system32\drivers\drmk.sys
0x90E0A000 \SystemRoot\system32\DRIVERS\smserial.sys
0x90EFA000 \SystemRoot\system32\drivers\modem.sys
0x90F07000 \SystemRoot\system32\drivers\MODEMCSA.sys
0x90F11000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x90F1A000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x90F2A000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x90F31000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x9100D000 \SystemRoot\system32\DRIVERS\snp2uvc.sys
0x911B7000 \SystemRoot\system32\DRIVERS\STREAM.SYS
0x911C4000 \SystemRoot\system32\DRIVERS\sncduvc.SYS
0x911CB000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x911DC000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x911E5000 \SystemRoot\System32\Drivers\Null.SYS
0x911EC000 \SystemRoot\System32\Drivers\Beep.SYS
0x911F3000 \SystemRoot\System32\drivers\vga.sys
0x90F4A000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x91000000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x90F6B000 \SystemRoot\system32\drivers\rdpencdd.sys
0x91008000 \SystemRoot\System32\Drivers\InCDrec.SYS
0x90F73000 \SystemRoot\system32\drivers\InCDFs.sys
0x90F8D000 \SystemRoot\System32\Drivers\Msfs.SYS
0x90F98000 \SystemRoot\System32\Drivers\Npfs.SYS
0x90FA6000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x90FAF000 \SystemRoot\system32\DRIVERS\tdx.sys
0x90FC5000 \SystemRoot\System32\Drivers\aswTdi.SYS
0x90FCF000 \SystemRoot\system32\DRIVERS\smb.sys
0x91406000 \SystemRoot\system32\drivers\afd.sys
0x9144E000 \SystemRoot\System32\Drivers\aswRdr.SYS
0x91453000 \SystemRoot\System32\DRIVERS\netbt.sys
0x91485000 \SystemRoot\system32\DRIVERS\pacer.sys
0x9149B000 \SystemRoot\system32\DRIVERS\netbios.sys
0x914A9000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x914BC000 \SystemRoot\System32\Drivers\SCDEmu.SYS
0x914C9000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x91505000 \SystemRoot\system32\drivers\nsiproxy.sys
0x9150F000 \SystemRoot\System32\Drivers\dfsc.sys
0x91526000 \SystemRoot\System32\Drivers\aswSP.SYS
0x9154D000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x91563000 \SystemRoot\System32\Drivers\crashdmp.sys
0x91570000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x9157B000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x98A20000 \SystemRoot\System32\win32k.sys
0x91583000 \SystemRoot\System32\drivers\Dxapi.sys
0x9158D000 \SystemRoot\system32\DRIVERS\monitor.sys
0x98C40000 \SystemRoot\System32\TSDDD.dll
0x98C60000 \SystemRoot\System32\cdd.dll
0x9159C000 \SystemRoot\system32\drivers\luafv.sys
0x915B7000 \??\C:\Windows\system32\drivers\aswMonFlt.sys
0x915EE000 \SystemRoot\System32\Drivers\aswFsBlk.SYS
0x9F60F000 \SystemRoot\system32\drivers\spsys.sys
0x9F6BF000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x9F6CF000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x9F6F9000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x9F703000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x9F716000 \SystemRoot\system32\drivers\HTTP.sys
0x9F783000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x9F7A0000 \SystemRoot\system32\DRIVERS\bowser.sys
0x9F7B9000 \SystemRoot\System32\drivers\mpsdrv.sys
0x9F7CE000 \SystemRoot\system32\drivers\mrxdav.sys
0x90BBD000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xA180B000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0xA1844000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0xA185C000 \SystemRoot\System32\DRIVERS\srv2.sys
0xA1884000 \SystemRoot\System32\DRIVERS\srv.sys
0xA18D2000 \SystemRoot\System32\Drivers\fastfat.SYS
0xA18FA000 \SystemRoot\system32\drivers\peauth.sys
0xA19D8000 \SystemRoot\System32\Drivers\secdrv.SYS
0xA19E2000 \SystemRoot\System32\drivers\tcpipreg.sys
0x90FE3000 \??\C:\Program Files\Clarus\Samsung SecretZone\mvd20.sys
0xA19EE000 \??\C:\Program Files\Clarus\Samsung SecretZone\mdf15.sys
0x90F33000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xA19F7000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x77560000 \Windows\System32\ntdll.dll

Processes (total 70):
0 System Idle Process
4 System
612 C:\Windows\System32\smss.exe
684 csrss.exe
740 C:\Windows\System32\wininit.exe
752 csrss.exe
788 C:\Windows\System32\services.exe
816 C:\Windows\System32\winlogon.exe
840 C:\Windows\System32\lsass.exe
852 C:\Windows\System32\lsm.exe
996 C:\Windows\System32\svchost.exe
1072 C:\Windows\System32\svchost.exe
1112 C:\Windows\System32\svchost.exe
1164 C:\Windows\System32\Ati2evxx.exe
1220 C:\Windows\System32\svchost.exe
1268 C:\Windows\System32\svchost.exe
1324 C:\Windows\System32\svchost.exe
1396 C:\Windows\System32\audiodg.exe
1420 C:\Windows\System32\svchost.exe
1456 C:\Windows\System32\SLsvc.exe
1524 C:\Windows\System32\svchost.exe
1584 C:\Windows\System32\Ati2evxx.exe
1728 C:\Windows\System32\svchost.exe
1872 C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
1912 C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
656 C:\Windows\System32\spoolsv.exe
676 C:\Windows\System32\svchost.exe
1560 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
896 C:\Windows\System32\svchost.exe
2072 C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
2336 C:\Program Files\Common Files\LightScribe\LSSrvc.exe
2352 C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe
2476 C:\Windows\System32\PnkBstrA.exe
2532 C:\Windows\System32\PnkBstrB.exe
2580 C:\Windows\System32\svchost.exe
2604 C:\Windows\System32\taskeng.exe
2628 C:\Windows\System32\svchost.exe
2740 C:\Windows\System32\svchost.exe
2760 C:\Windows\System32\dwm.exe
2788 C:\Windows\System32\SearchIndexer.exe
2876 C:\Windows\explorer.exe
3420 C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
3468 C:\Windows\RtHDVCpl.exe
3504 C:\Program Files\ASUS\ATK Media\DMedia.exe
3512 C:\Program Files\Apoint2K\Apoint.exe
3536 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
3600 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
3616 C:\Program Files\Unlocker\UnlockerAssistant.exe
3688 C:\Program Files\iTunes\iTunesHelper.exe
3788 C:\Program Files\ContourStoryteller\ContourAutoplay.exe
3796 C:\Program Files\Alwil Software\Avast5\AvastUI.exe
3804 C:\Windows\ehome\ehtray.exe
3820 C:\Program Files\Windows Media Player\wmpnscfg.exe
3832 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
4052 C:\Program Files\Apoint2K\ApMsgFwd.exe
2128 C:\Windows\ehome\ehmsas.exe
2288 C:\Program Files\Windows Media Player\wmpnetwk.exe
2700 C:\Program Files\Apoint2K\ApntEx.exe
1564 C:\Program Files\Apoint2K\hidfind.exe
3288 C:\Program Files\Apoint2K\Apvfb.exe
1464 C:\Windows\System32\taskeng.exe
3944 C:\Program Files\Winamp\winamp.exe
2548 C:\Program Files\iPod\bin\iPodService.exe
3564 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
4332 C:\Windows\System32\conime.exe
4292 C:\Program Files\Mozilla Firefox\firefox.exe
1304 C:\Program Files\Mozilla Firefox\plugin-container.exe
2332 C:\Windows\System32\SearchProtocolHost.exe
5308 C:\Windows\System32\SearchFilterHost.exe
5884 C:\Users\purin\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000001`b5900000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x0000000f`aee00000 (NTFS)

PhysicalDrive0 Model Number: ST9120822AS, Rev: 3.ALC

Size Device Name MBR Status
--------------------------------------------
111 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Done!

 

ComboFix Results

ComboFix 10-12-20.01 - purin 12/20/2010 23:42:41.1.2 - x86
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6002.2.1252.1.1033.18.3070.2011 [GMT -6:00]
Running from: c:\users\purin\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\k-1-3542-4232123213-7676767-8888886

.
((((((((((((((((((((((((( Files Created from 2010-11-21 to 2010-12-21 )))))))))))))))))))))))))))))))
.

2010-12-17 19:35 . 2010-09-07 15:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-12-17 19:35 . 2010-09-07 15:47 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-12-17 19:35 . 2010-09-07 15:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-12-17 19:35 . 2010-09-07 15:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-12-17 19:35 . 2010-09-07 15:47 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-12-17 19:34 . 2010-09-07 16:12 38848 ----a-w- c:\windows\avastSS.scr
2010-12-17 19:34 . 2010-09-07 16:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-12-17 19:34 . 2010-12-17 19:34 -------- d-----w- c:\programdata\Alwil Software
2010-12-17 19:34 . 2010-12-17 19:34 -------- d-----w- c:\program files\Alwil Software
2010-12-17 19:24 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4A6E0A7B-F2F0-4D9B-8BDC-AE3F0DAF8F96}\mpengine.dll
2010-12-16 03:18 . 2010-10-12 15:53 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll
2010-12-16 03:18 . 2010-10-12 13:41 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe
2010-12-16 03:18 . 2010-10-12 13:41 515584 ----a-w- c:\program files\Windows Mail\wab.exe
2010-12-16 03:18 . 2010-10-18 13:31 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-12-16 03:18 . 2010-11-04 18:56 345600 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-12-16 03:18 . 2010-11-04 18:55 352768 ----a-w- c:\windows\system32\taskschd.dll
2010-12-16 03:18 . 2010-11-04 18:55 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-12-16 03:18 . 2010-11-04 18:55 270336 ----a-w- c:\windows\system32\taskcomp.dll
2010-12-16 03:18 . 2010-11-04 16:34 171520 ----a-w- c:\windows\system32\taskeng.exe
2010-12-16 03:16 . 2010-10-18 13:37 81920 ----a-w- c:\windows\system32\consent.exe
2010-12-16 03:16 . 2010-10-28 15:44 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-12-16 03:16 . 2010-10-28 13:27 292352 ----a-w- c:\windows\system32\atmfd.dll
2010-12-16 03:16 . 2010-06-16 15:30 72704 ----a-w- c:\windows\system32\fontsub.dll
2010-12-16 03:14 . 2010-10-28 13:20 2048 ----a-w- c:\windows\system32\tzres.dll
2010-12-16 03:13 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-12-16 02:25 . 2010-12-16 02:25 -------- d-----w- c:\programdata\dCbOm06308
2010-12-13 19:52 . 2010-12-13 19:52 -------- d-----w- c:\program files\Trend Micro
2010-12-10 16:42 . 2010-03-15 09:31 165376 ----a-w- c:\windows\system32\unrar.dll
2010-12-10 16:42 . 2010-12-16 04:48 -------- d-----w- c:\program files\ContourStoryteller
2010-11-24 00:31 . 2010-10-19 04:27 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-16 02:58 . 2007-11-15 07:02 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-10-19 16:41 . 2009-10-03 23:09 222080 ------w- c:\windows\system32\MpSigStub.exe
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@= "{A8D448F4-0431-45AC-9F5E-E1B434AB2249} "
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 01:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe "= "c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"swg "= "c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-17 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL "= "c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"Microsoft Pinyin IME Migration "= "c:\progra~1\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE" [2008-11-04 33128]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RtHDVCpl "= "RtHDVCpl.exe" [2007-09-03 4702208]
"Skytel "= "Skytel.exe" [2007-08-03 1826816]
"ATKMEDIA "= "c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-11-02 61440]
"Apoint "= "c:\program files\Apoint2K\Apoint.exe" [2006-09-12 155648]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2010-09-24 40368]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"TkBellExe "= "c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-09-16 198160]
"UnlockerAssistant "= "c:\program files\Unlocker\UnlockerAssistant.exe" [2010-03-09 15872]
"iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2010-08-10 421888]
"ContourCameraFinder "= "c:\program files\ContourStoryteller\ContourAutoplay.exe" [2010-12-08 72184]
"avast5 "= "c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA "= 0 (0x0)
"EnableUIADesktopToggle "= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs "=1 (0x1)
"AppInit_DLLs "=inetpage10.dll crtrgwiz.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\keyboard layouts\e0200804]
IME File REG_SZ IMSC12.IME

[HKLM\~\startupfolder\C:^Users^purin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\users\purin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2007-11-15 07:09 37232 ----a-w- c:\windows\ASScrProlog.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2007-11-15 07:09 33136 ----a-w- c:\windows\ASScrPro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-03-26 19:50 149040 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus Photo R800]
2007-01-16 11:00 177664 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATI8JA.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-07-21 20:53 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-26 20:12 161328 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
2007-06-26 18:10 778240 ----a-w- c:\program files\PowerForPhone\PowerForPhone.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-08-10 10:15 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-10-11 10:17 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-03-17 22:08 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2009-09-16 22:18 198160 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 MSR Service;Virtual Disk Service Manager;c:\program files\Clarus\Samsung SecretZone\MSSvc.exe [2009-05-13 102400]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
FF - ProfilePath - c:\users\purin\AppData\Roaming\Mozilla\Firefox\Profiles\1anxne1t.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: network.proxy.type - 4
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Move Media Player: moveplayer@movenetworks.com - %profile%\extensions\moveplayer@movenetworks.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\program files\Real\RealPlayer\browserrecord\firefox\ext
FF - user.js: yahoo.homepage.dontask - true
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-Aim6 - c:\program files\AIM6\aim6.exe
MSConfigStartUp-AppleSyncNotifier - c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
MSConfigStartUp-msnmsgr - c:\program files\Windows Live\Messenger\msnmsgr.exe
AddRemove-KLiteCodecPack_is1 - c:\program files\K-Lite Codec Pack\unins000.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-20 23:50
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


C:\ADSM_PData_0150

scan completed successfully
hidden files: 1

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
"MSCurrentCountry "=dword:000000b5

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(1336)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
c:\program files\Common Files\Ahead\Lib\NeroSearchBar.dll
c:\program files\Common Files\Ahead\Lib\MFC71U.DLL
c:\program files\Common Files\Ahead\Lib\BCGCBPRO800u.dll
.
Completion time: 2010-12-20 23:53:42
ComboFix-quarantined-files.txt 2010-12-21 05:53

Pre-Run: 11,742,523,392 bytes free
Post-Run: 11,590,119,424 bytes free

- - End Of File - - 94853204D24B056819A5CC42BB2D56B4

 

I'm assuming that those directions were to make ComoboFix update itself? Everything was done as mentioned above.
____________
ComboFix 10-12-24.01 - purin 12/24/2010 19:14:26.2.2 - x86
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6002.2.1252.1.1033.18.3070.1944 [GMT -6:00]
Running from: c:\users\purin\Desktop\ComboFix.exe
Command switches used :: c:\users\purin\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2010-11-25 to 2010-12-25 )))))))))))))))))))))))))))))))
.

2010-12-25 01:22 . 2010-12-25 01:22 -------- d-----w- c:\users\purin\AppData\Local\temp
2010-12-25 01:22 . 2010-12-25 01:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-12-25 01:09 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{870F3662-3D1C-4C1F-880F-B580450C462D}\mpengine.dll
2010-12-17 19:35 . 2010-09-07 15:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-12-17 19:35 . 2010-09-07 15:47 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-12-17 19:35 . 2010-09-07 15:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-12-17 19:35 . 2010-09-07 15:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-12-17 19:35 . 2010-09-07 15:47 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-12-17 19:34 . 2010-09-07 16:12 38848 ----a-w- c:\windows\avastSS.scr
2010-12-17 19:34 . 2010-09-07 16:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-12-17 19:34 . 2010-12-17 19:34 -------- d-----w- c:\programdata\Alwil Software
2010-12-17 19:34 . 2010-12-17 19:34 -------- d-----w- c:\program files\Alwil Software
2010-12-16 03:18 . 2010-10-12 15:53 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll
2010-12-16 03:18 . 2010-10-12 13:41 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe
2010-12-16 03:18 . 2010-10-12 13:41 515584 ----a-w- c:\program files\Windows Mail\wab.exe
2010-12-16 03:18 . 2010-10-18 13:31 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-12-16 03:18 . 2010-11-04 18:56 345600 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-12-16 03:18 . 2010-11-04 18:55 352768 ----a-w- c:\windows\system32\taskschd.dll
2010-12-16 03:18 . 2010-11-04 18:55 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-12-16 03:18 . 2010-11-04 18:55 270336 ----a-w- c:\windows\system32\taskcomp.dll
2010-12-16 03:18 . 2010-11-04 16:34 171520 ----a-w- c:\windows\system32\taskeng.exe
2010-12-16 03:16 . 2010-10-18 13:37 81920 ----a-w- c:\windows\system32\consent.exe
2010-12-16 03:16 . 2010-10-28 15:44 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-12-16 03:16 . 2010-10-28 13:27 292352 ----a-w- c:\windows\system32\atmfd.dll
2010-12-16 03:16 . 2010-06-16 15:30 72704 ----a-w- c:\windows\system32\fontsub.dll
2010-12-16 03:14 . 2010-10-28 13:20 2048 ----a-w- c:\windows\system32\tzres.dll
2010-12-16 03:13 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-12-16 02:25 . 2010-12-16 02:25 -------- d-----w- c:\programdata\dCbOm06308
2010-12-13 19:52 . 2010-12-13 19:52 -------- d-----w- c:\program files\Trend Micro
2010-12-10 23:19 . 2010-12-10 23:19 62976 ----a-w- c:\windows\system32\inetpage10.dll
2010-12-10 16:42 . 2010-03-15 09:31 165376 ----a-w- c:\windows\system32\unrar.dll
2010-12-10 16:42 . 2010-12-16 04:48 -------- d-----w- c:\program files\ContourStoryteller

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-16 02:58 . 2007-11-15 07:02 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-10-19 16:41 . 2009-10-03 23:09 222080 ------w- c:\windows\system32\MpSigStub.exe
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@= "{A8D448F4-0431-45AC-9F5E-E1B434AB2249} "
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 01:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe "= "c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"swg "= "c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-17 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL "= "c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"Microsoft Pinyin IME Migration "= "c:\progra~1\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE" [2008-11-04 33128]
"StartCCC "= "c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RtHDVCpl "= "RtHDVCpl.exe" [2007-09-03 4702208]
"Skytel "= "Skytel.exe" [2007-08-03 1826816]
"ATKMEDIA "= "c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-11-02 61440]
"Apoint "= "c:\program files\Apoint2K\Apoint.exe" [2006-09-12 155648]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2010-09-24 40368]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"TkBellExe "= "c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-09-16 198160]
"UnlockerAssistant "= "c:\program files\Unlocker\UnlockerAssistant.exe" [2010-03-09 15872]
"iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2010-08-10 421888]
"ContourCameraFinder "= "c:\program files\ContourStoryteller\ContourAutoplay.exe" [2010-12-08 72184]
"avast5 "= "c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA "= 0 (0x0)
"EnableUIADesktopToggle "= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs "=1 (0x1)
"AppInit_DLLs "=inetpage10.dll crtrgwiz.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\keyboard layouts\e0200804]
IME File REG_SZ IMSC12.IME

[HKLM\~\startupfolder\C:^Users^purin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\users\purin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2007-11-15 07:09 37232 ----a-w- c:\windows\ASScrProlog.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2007-11-15 07:09 33136 ----a-w- c:\windows\ASScrPro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-03-26 19:50 149040 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus Photo R800]
2007-01-16 11:00 177664 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATI8JA.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-07-21 20:53 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-26 20:12 161328 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
2007-06-26 18:10 778240 ----a-w- c:\program files\PowerForPhone\PowerForPhone.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-08-10 10:15 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-10-11 10:17 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-03-17 22:08 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2009-09-16 22:18 198160 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 MSR Service;Virtual Disk Service Manager;c:\program files\Clarus\Samsung SecretZone\MSSvc.exe [2009-05-13 102400]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
FF - ProfilePath - c:\users\purin\AppData\Roaming\Mozilla\Firefox\Profiles\1anxne1t.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: network.proxy.type - 4
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Move Media Player: moveplayer@movenetworks.com - %profile%\extensions\moveplayer@movenetworks.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\program files\Real\RealPlayer\browserrecord\firefox\ext
FF - user.js: yahoo.homepage.dontask - true
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-24 19:22
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


C:\ADSM_PData_0150

scan completed successfully
hidden files: 1

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
"MSCurrentCountry "=dword:000000b5

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(5360)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
c:\program files\Common Files\Ahead\Lib\NeroSearchBar.dll
c:\program files\Common Files\Ahead\Lib\MFC71U.DLL
c:\program files\Common Files\Ahead\Lib\BCGCBPRO800u.dll
.
Completion time: 2010-12-24 19:25:30
ComboFix-quarantined-files.txt 2010-12-25 01:25

Pre-Run: 11,548,577,792 bytes free
Post-Run: 11,093,295,104 bytes free

- - End Of File - - 3EA61154A3521E776C8E36E81BF5A328

 

Avast blocks a trojan, other than that the computer runs properly.
________________________
OTL logfile created on: 12/29/2010 3:45:24 PM - Run 1
OTL by OldTimer - Version 3.2.18.2 Folder = C:\Users\purin\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 68.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 55.89 Gb Total Space | 10.10 Gb Free Space | 18.08% Space Free | Partition Type: NTFS
Drive D: | 49.06 Gb Total Space | 9.16 Gb Free Space | 18.68% Space Free | Partition Type: NTFS

Computer Name: PURIN-PC | User Name: purin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/12/29 15:43:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\purin\Desktop\OTL.exe
PRC - [2010/12/08 16:10:34 | 000,072,184 | ---- | M] () -- C:\Program Files\ContourStoryteller\ContourAutoplay.exe
PRC - [2010/09/07 10:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/06/10 20:03:08 | 000,144,176 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2009/09/16 16:18:58 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2009/05/12 21:00:48 | 000,102,400 | ---- | M] () -- C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe
PRC - [2009/04/11 00:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/17 16:08:11 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2007/09/03 04:39:21 | 004,702,208 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/05/18 04:31:16 | 000,073,728 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007/03/26 13:43:02 | 000,864,816 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
PRC - [2006/11/22 03:31:25 | 000,630,784 | ---- | M] (Motorola Inc.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
PRC - [2006/11/02 10:27:32 | 000,061,440 | ---- | M] (ASUSTeK Computer INC.) -- C:\Program Files\ASUS\ATK Media\DMedia.exe
PRC - [2006/09/11 04:31:35 | 000,208,896 | ---- | M] (ALPS) -- C:\Program Files\Apoint2K\Apvfb.exe
PRC - [2006/09/08 01:10:21 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint2K\hidfind.exe


========== Modules (SafeList) ==========

MOD - [2010/12/29 15:43:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\purin\Desktop\OTL.exe
MOD - [2010/08/31 09:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - File not found [Auto | Stopped] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - File not found [Auto | Stopped] -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/06/10 20:03:08 | 000,144,176 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/03/18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/09/24 19:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009/05/12 21:00:48 | 000,102,400 | ---- | M] () [Auto | Running] -- C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe -- (MSR Service)
SRV - [2008/05/02 21:44:32 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service)
SRV - [2008/01/19 01:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/05/18 04:31:16 | 000,073,728 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
SRV - [2007/03/26 13:43:02 | 000,864,816 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | Auto | Stopped] -- D:\npkcrypt.sys -- (npkcrypt)
DRV - File not found [Kernel | Unknown | Running] -- -- (mvd20)
DRV - File not found [Kernel | Unknown | Running] -- -- (mdf15)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\purin\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - File not found [Kernel | Auto | Stopped] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2010/09/07 09:52:25 | 000,046,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/09/07 09:52:03 | 000,165,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/09/07 09:47:46 | 000,023,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/09/07 09:47:30 | 000,050,768 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2010/09/07 09:47:07 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009/01/13 08:45:00 | 000,954,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008/11/02 02:44:10 | 000,056,572 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2008/08/06 07:26:08 | 000,124,928 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2007/09/05 03:36:25 | 001,953,944 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/08/10 22:19:26 | 000,029,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007/07/27 09:36:37 | 002,929,664 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2007/07/23 08:23:46 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2007/07/23 08:23:46 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2007/07/23 08:23:44 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2007/05/24 20:15:15 | 001,743,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2007/03/26 13:43:00 | 000,039,472 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\Windows\System32\drivers\InCDRm.sys -- (incdrm)
DRV - [2007/03/26 13:42:56 | 000,037,040 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\Windows\System32\drivers\InCDPass.sys -- (InCDPass)
DRV - [2007/03/26 13:42:44 | 000,108,592 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- C:\Windows\System32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2007/03/22 00:02:04 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/02/24 16:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/01/24 04:08:39 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2007/01/23 18:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006/12/14 01:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006/11/22 03:34:59 | 000,982,272 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2006/11/02 03:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006/11/02 03:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006/11/02 03:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006/11/02 03:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006/11/02 03:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006/11/02 03:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006/11/02 03:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006/11/02 03:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006/11/02 03:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006/11/02 03:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 03:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 03:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006/11/02 03:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006/11/02 03:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 03:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 03:50:17 | 000,041,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2006/11/02 03:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006/11/02 03:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006/11/02 03:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 03:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006/11/02 03:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006/11/02 03:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006/11/02 03:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006/11/02 03:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006/11/02 03:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 03:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 03:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006/11/02 03:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 03:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006/11/02 03:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 03:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 03:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 03:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006/11/02 03:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2006/11/02 03:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2006/11/02 03:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2006/11/02 02:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 02:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 02:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 02:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 02:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 02:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/02 01:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/02 01:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R)
DRV - [2006/11/02 01:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2006/10/13 21:04:33 | 004,422,560 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2006/08/29 19:35:57 | 000,140,800 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.google.com "
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.07103010
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.6.20090220
FF - prefs.js..network.proxy.type: 4


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/12/15 22:48:03 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/12/15 21:48:15 | 000,000,000 | ---D | M]

[2008/08/31 20:08:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\purin\AppData\Roaming\mozilla\Extensions
[2010/12/29 11:33:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\purin\AppData\Roaming\mozilla\Firefox\Profiles\1anxne1t.default\extensions
[2010/06/11 18:32:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\purin\AppData\Roaming\mozilla\Firefox\Profiles\1anxne1t.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/08/19 01:54:59 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\purin\AppData\Roaming\mozilla\Firefox\Profiles\1anxne1t.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2008/06/16 20:32:07 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\purin\AppData\Roaming\mozilla\Firefox\Profiles\1anxne1t.default\extensions\moveplayer@movenetworks.com
[2010/12/29 11:33:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009/09/16 16:19:42 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAM FILES\REAL\REALPLAYER\BROWSERRECORD\FIREFOX\EXT

O1 HOSTS File: ([2010/01/05 19:07:35 | 000,371,260 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 12799 more lines...
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [ContourCameraFinder] C:\Program Files\ContourStoryteller\ContourAutoplay.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O15 - HKCU\..Trusted Domains: real.com ([rhap-app-4-0] https in Trusted sites)
O15 - HKCU\..Trusted Domains: real.com ([rhapreg] https in Trusted sites)
O16 - DPF: {22945A69-1191-4DCF-9E6F-409BDE94D101} http://chil.solidworks.com/htdocs/pdownload/edrawings/e2008sp03/cab/eModelsStandard.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - AppInit_DLLs: (crtrgwiz.dll) - C:\Windows\System32\crtrgwiz.dll ()
O20 - AppInit_DLLs: (inetpage10.dll) - C:\Windows\System32\inetpage10.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\purin\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\purin\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 15:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: wave1 - C:\Windows\System32\serwvdrv.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2010/12/29 15:43:31 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\purin\Desktop\OTL.exe
[2010/12/24 19:25:32 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2010/12/24 19:25:32 | 000,000,000 | ---D | C] -- C:\Users\purin\AppData\Local\temp
[2010/12/24 19:24:10 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2010/12/24 19:11:18 | 000,000,000 | ---D | C] -- C:\ComboFix
[2010/12/24 19:10:32 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2010/12/23 10:47:26 | 000,000,000 | ---D | C] -- C:\Users\purin\Desktop\Didgy Slacker - About Time
[2010/12/20 23:41:12 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2010/12/20 23:41:12 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2010/12/20 23:41:12 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2010/12/20 23:41:05 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/12/20 23:40:41 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/12/20 00:22:22 | 000,000,000 | ---D | C] -- C:\Users\purin\Desktop\NTBR_CD
[2010/12/18 11:17:02 | 000,000,000 | ---D | C] -- C:\Users\purin\Desktop\bootkit
[2010/12/17 13:35:48 | 000,165,584 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2010/12/17 13:35:48 | 000,017,744 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2010/12/17 13:35:47 | 000,023,376 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2010/12/17 13:35:46 | 000,046,672 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2010/12/17 13:35:42 | 000,050,768 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2010/12/17 13:34:38 | 000,038,848 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2010/12/17 13:34:37 | 000,167,592 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2010/12/17 13:34:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2010/12/17 13:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010/12/15 22:09:40 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Users\purin\Desktop\TFC.exe
[2010/12/15 20:25:47 | 000,000,000 | ---D | C] -- C:\ProgramData\dCbOm06308
[2010/12/13 13:52:36 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/12/10 10:42:32 | 000,000,000 | ---D | C] -- C:\Program Files\ContourStoryteller
[2007/01/24 04:08:39 | 000,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[1 C:\Users\purin\Desktop\*.tmp files -> C:\Users\purin\Desktop\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/12/29 15:43:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\purin\Desktop\OTL.exe
[2010/12/29 15:38:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/12/29 13:23:18 | 000,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/12/29 13:23:18 | 000,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/12/29 13:16:26 | 000,616,174 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/12/29 13:16:26 | 000,109,040 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/12/28 23:53:18 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2010/12/28 13:15:46 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010/12/24 19:10:21 | 003,998,064 | R--- | M] () -- C:\Users\purin\Desktop\ComboFix.exe
[2010/12/23 10:34:11 | 039,006,097 | ---- | M] () -- C:\Users\purin\Desktop\AboutTime_0.zip
[2010/12/20 00:21:27 | 002,565,432 | ---- | M] () -- C:\Users\purin\Desktop\NTBR_CD.exe
[2010/12/17 13:35:48 | 000,001,847 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010/12/17 13:35:42 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2010/12/17 13:32:56 | 051,515,288 | ---- | M] () -- C:\Users\purin\Desktop\setup_av_free.exe
[2010/12/17 13:29:01 | 000,039,605 | ---- | M] () -- C:\Users\purin\Desktop\bootkit_remover.rar
[2010/12/16 11:44:59 | 000,418,888 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/12/15 23:26:05 | 000,624,128 | ---- | M] () -- C:\Users\purin\Desktop\dds.scr
[2010/12/15 23:24:19 | 000,080,384 | ---- | M] () -- C:\Users\purin\Desktop\MBRCheck.exe
[2010/12/15 22:20:13 | 000,296,448 | ---- | M] () -- C:\Users\purin\Desktop\yiyluuws.exe
[2010/12/15 22:09:45 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Users\purin\Desktop\TFC.exe
[2010/12/15 20:58:57 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2010/12/13 14:41:17 | 000,006,365 | ---- | M] () -- C:\Users\purin\Desktop\hijackthis - possible explorer virus
[2010/12/10 21:47:52 | 000,178,688 | ---- | M] () -- C:\Users\purin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/10 17:19:42 | 000,478,720 | -HS- | M] () -- C:\Windows\System32\crtrgwiz.dll
[2010/12/10 17:19:35 | 000,062,976 | ---- | M] () -- C:\Windows\System32\inetpage10.dll
[2010/12/10 10:42:41 | 000,000,984 | ---- | M] () -- C:\Users\Public\Desktop\Contour Storyteller.lnk
[1 C:\Users\purin\Desktop\*.tmp files -> C:\Users\purin\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/12/23 10:31:28 | 039,006,097 | ---- | C] () -- C:\Users\purin\Desktop\AboutTime_0.zip
[2010/12/20 23:41:12 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2010/12/20 23:41:12 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2010/12/20 23:41:12 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2010/12/20 23:41:12 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2010/12/20 23:41:12 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010/12/20 23:33:51 | 003,998,064 | R--- | C] () -- C:\Users\purin\Desktop\ComboFix.exe
[2010/12/20 00:21:19 | 002,565,432 | ---- | C] () -- C:\Users\purin\Desktop\NTBR_CD.exe
[2010/12/17 13:35:48 | 000,001,847 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010/12/17 13:29:05 | 000,039,605 | ---- | C] () -- C:\Users\purin\Desktop\bootkit_remover.rar
[2010/12/17 13:28:14 | 051,515,288 | ---- | C] () -- C:\Users\purin\Desktop\setup_av_free.exe
[2010/12/15 23:26:22 | 000,624,128 | ---- | C] () -- C:\Users\purin\Desktop\dds.scr
[2010/12/15 23:24:42 | 000,080,384 | ---- | C] () -- C:\Users\purin\Desktop\MBRCheck.exe
[2010/12/15 22:20:04 | 000,296,448 | ---- | C] () -- C:\Users\purin\Desktop\yiyluuws.exe
[2010/12/13 14:41:17 | 000,006,365 | ---- | C] () -- C:\Users\purin\Desktop\hijackthis - possible explorer virus
[2010/12/10 17:19:42 | 000,478,720 | -HS- | C] () -- C:\Windows\System32\crtrgwiz.dll
[2010/12/10 17:19:35 | 000,062,976 | ---- | C] () -- C:\Windows\System32\inetpage10.dll
[2010/12/10 10:42:45 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2010/12/10 10:42:41 | 000,000,984 | ---- | C] () -- C:\Users\Public\Desktop\Contour Storyteller.lnk
[2010/02/20 11:44:23 | 000,000,287 | ---- | C] () -- C:\Windows\game.ini
[2010/01/28 01:01:31 | 000,000,127 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2009/09/23 19:04:24 | 000,000,093 | ---- | C] () -- C:\Users\purin\AppData\Local\fusioncache.dat
[2009/08/19 21:59:13 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/02/26 19:44:32 | 000,001,025 | ---- | C] () -- C:\Windows\System32\sysprs7.dll
[2009/02/26 19:44:32 | 000,000,205 | ---- | C] () -- C:\Windows\System32\lsprst7.dll
[2008/07/21 21:33:38 | 000,000,004 | ---- | C] () -- C:\Users\purin\AppData\Roaming\564057
[2008/07/21 21:33:37 | 000,870,128 | ---- | C] () -- C:\Users\purin\AppData\Roaming\mcs.rma
[2008/05/02 21:44:41 | 000,000,000 | ---- | C] () -- C:\Windows\eDrawingOfficeAutomator.INI
[2008/03/21 22:57:16 | 000,000,680 | ---- | C] () -- C:\Users\purin\AppData\Local\d3d9caps.dat
[2008/02/12 00:15:59 | 000,003,774 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2008/02/04 10:23:40 | 000,178,688 | ---- | C] () -- C:\Users\purin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/02/04 10:23:40 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2008/02/04 01:18:05 | 000,137,464 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2008/01/22 08:27:16 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2008/01/01 01:32:05 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2007/11/15 01:09:38 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2007/11/15 00:41:35 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2007/07/27 09:26:27 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/05/24 20:15:15 | 001,743,232 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2007/05/09 01:16:39 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys
[2007/04/24 10:41:11 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini
[2006/11/02 06:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 01:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini

========== LOP Check ==========

[2010/09/21 17:57:47 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\4CF459C090D7CA8F0EA52858BD4ADC02
[2010/08/20 00:48:06 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\Ableton
[2009/10/25 13:26:56 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\DragonicaSCB
[2009/03/15 10:40:02 | 000,000,000 | -H-D | M] -- C:\Users\purin\AppData\Roaming\ijjigame
[2008/07/16 11:07:05 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\LimeWire
[2008/08/12 11:57:47 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\Nexon
[2009/07/18 11:59:28 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\Soldat
[2009/09/23 19:04:31 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\Turbine
[2010/12/15 22:48:05 | 000,000,000 | ---D | M] -- C:\Users\purin\AppData\Roaming\uTorrent
[2010/12/28 13:15:46 | 000,032,620 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2006/09/18 15:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2009/04/11 00:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr
[2007/04/24 11:05:41 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2010/12/24 19:25:30 | 000,014,673 | ---- | M] () -- C:\ComboFix.txt
[2006/09/18 15:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2007/03/06 04:43:44 | 000,000,019 | ---- | M] () -- C:\CQ12.txt
[2007/11/15 01:13:44 | 000,019,898 | ---- | M] () -- C:\devlist.txt
[2007/12/13 15:05:56 | 001,048,576 | RH-- | M] () -- C:\F3K.BIN
[2007/08/21 03:02:17 | 001,048,576 | RH-- | M] () -- C:\F3Ka.BIN
[2007/10/24 00:08:03 | 000,000,016 | ---- | M] () -- C:\F3Ka_F3Ke_Vista.20
[2007/08/21 03:02:17 | 001,048,576 | RH-- | M] () -- C:\F3Ke.BIN
[2007/11/15 01:10:22 | 000,000,009 | ---- | M] () -- C:\Finish.log
[2009/12/12 03:10:10 | 000,125,056 | ---- | M] () -- C:\hookapiA.log
[2008/05/16 21:07:35 | 000,000,426 | -H-- | M] () -- C:\IPH.PH
[2009/02/26 22:51:38 | 000,000,000 | ---- | M] () -- C:\law.sp
[2009/07/18 12:58:06 | 000,000,000 | R--- | M] () -- C:\logwmemory.bin
[2010/12/15 22:21:33 | 000,000,109 | ---- | M] () -- C:\mbam-error.txt
[2007/04/14 17:26:25 | 000,000,027 | ---- | M] () -- C:\NERO.LOG
[2007/03/15 17:18:45 | 000,000,025 | ---- | M] () -- C:\OFFICE2007_Q.TXT
[2010/12/28 22:35:40 | 3533,987,840 | -HS- | M] () -- C:\pagefile.sys
[2007/11/14 10:03:19 | 000,000,105 | ---- | M] () -- C:\Pass.txt
[2007/07/18 17:40:45 | 000,000,508 | ---- | M] () -- C:\Patch.LOG
[2007/11/15 00:17:10 | 000,000,426 | ---- | M] () -- C:\RHDSetup.log
[2007/11/15 00:43:04 | 000,000,086 | ---- | M] () -- C:\setup.log
[2009/08/28 21:22:12 | 003,932,184 | ---- | M] () -- C:\snp2uvc-001.raw
[2006/05/15 18:22:24 | 000,000,005 | ---- | M] () -- C:\Store.LOG
[2007/09/13 17:06:04 | 000,000,023 | ---- | M] () -- C:\V53.TXT
[2009/01/07 00:01:01 | 000,000,162 | ---- | M] () -- C:\YServer.txt

< %systemroot%\Fonts\*.com >
[2006/11/02 06:37:12 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 06:37:12 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 06:37:12 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/08/20 02:09:16 | 000,037,665 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 15:37:34 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/01/19 01:34:28 | 000,089,600 | ---- | M] (Hewlett-Packard Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL
[2006/11/02 06:35:48 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 18:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2007/11/15 01:09:40 | 000,503,808 | ---- | M] (ScreenTime Media) -- C:\Windows\Asus_Camera_ScreenSaver.scr
[2010/09/07 10:12:17 | 000,038,848 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/06/25 17:51:42 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2006/11/02 04:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006/11/02 04:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006/11/02 04:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 04:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 04:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/05/23 19:41:37 | 000,000,221 | -HS- | M] () -- C:\Users\purin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2010/12/24 19:10:21 | 003,998,064 | R--- | M] () -- C:\Users\purin\Desktop\ComboFix.exe
[2010/12/15 23:24:19 | 000,080,384 | ---- | M] () -- C:\Users\purin\Desktop\MBRCheck.exe
[2010/12/20 00:21:27 | 002,565,432 | ---- | M] () -- C:\Users\purin\Desktop\NTBR_CD.exe
[2010/12/29 15:43:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\purin\Desktop\OTL.exe
[2010/12/17 13:32:56 | 051,515,288 | ---- | M] () -- C:\Users\purin\Desktop\setup_av_free.exe
[2010/12/15 22:09:45 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Users\purin\Desktop\TFC.exe
[2010/07/05 21:37:53 | 003,196,328 | ---- | M] () -- C:\Users\purin\Desktop\ventrilo-3.0.5-Windows-i386.exe
[2010/12/15 22:20:13 | 000,296,448 | ---- | M] () -- C:\Users\purin\Desktop\yiyluuws.exe
[1 C:\Users\purin\Desktop\*.tmp files -> C:\Users\purin\Desktop\*.tmp -> ]

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >
[2009/08/20 02:21:40 | 000,008,192 | ---- | M] () -- C:\Windows\security\database\edb.chk
[2009/08/20 02:21:10 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edb.log
[2009/08/20 02:11:34 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edbres00001.jrs
[2009/08/20 02:11:34 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edbres00002.jrs
[2009/08/20 02:21:10 | 001,056,768 | ---- | M] () -- C:\Windows\security\database\tmp.edb

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2008/01/01 05:09:43 | 000,000,402 | -HS- | M] () -- C:\Users\purin\Favorites\desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2009/03/12 15:47:59 | 000,003,774 | ---- | M] () -- C:\ProgramData\hpzinstall.log

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >
ASUS Camera ScreenSaver Uninstaller.exe
ASUS Camera ScreenSaver.exe

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.* >

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >


< End of report >

 

Extras.txt

OTL Extras logfile created on: 12/29/2010 3:45:24 PM - Run 1
OTL by OldTimer - Version 3.2.18.2 Folder = C:\Users\purin\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 68.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 55.89 Gb Total Space | 10.10 Gb Free Space | 18.08% Space Free | Partition Type: NTFS
Drive D: | 49.06 Gb Total Space | 9.16 Gb Free Space | 18.68% Space Free | Partition Type: NTFS

Computer Name: PURIN-PC | User Name: purin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{BF7CF1C3-5DB1-4A46-B20B-0BDFF39F7C1F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05A8442A-B6EB-4F88-91F6-6ED4F0A2B5E8}" = protocol=17 | dir=in | app=d:\games\launcher.exe |
"{095D2E8E-F886-4599-8CD7-68F938EA6AEA}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{0FD42871-DB17-4884-A45C-BD38BD0595BE}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{1E1E3C60-198B-4037-AE35-E2932B1B0DFF}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{1FD97B6C-B351-4ECA-8578-893E605A2B47}" = protocol=6 | dir=in | app=d:\games\launcher.exe |
"{2D0C1B53-758D-4E83-A611-C888379D09D0}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yserver.exe |
"{311ECCC3-41E1-47A7-A78D-F42DCF609ED1}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{45B327D3-5206-4057-BC65-286899DD27C8}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{52C3FDF6-E72A-4AE8-BE33-E7057D02B032}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{57A3854E-DFB0-49E5-B311-9DF75763B2FB}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{5927E4B8-3B09-4A16-BA1D-32A7A66C4808}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{592C61C9-D5E4-48C1-9BC7-4AC35624CB89}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{6B7D6126-AC9D-4B3D-832D-9B5642E930BE}" = protocol=6 | dir=in | app=d:\bf2\bf2.exe |
"{6BABD40C-5CE9-4D0F-BD7F-474292A927ED}" = protocol=17 | dir=in | app=d:\bf2\bf2.exe |
"{6C1F00CB-2460-4103-91F2-ED62A7E8F70C}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yserver.exe |
"{74372D4A-9872-45D2-A4C5-555B97FA5A2E}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{83D9AE40-0ED2-4FBF-829C-F2B45FD1EF34}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B297835C-E6AA-4B5F-8C54-CB82ACB2F8FE}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{C03D317D-903A-496B-BFA5-374ACB6E02EA}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{C0FF3DA5-347F-4622-BAFC-449B03B00E0C}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{D051F2DF-75DB-4185-AD59-1BC098B59E18}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E7447E80-DC5C-4BAF-B1FB-4E275F69000D}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{EB3617E9-4452-45A5-B6B2-EC486900960A}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{F86923DA-A9FA-4464-B0F1-058ECBEDE7EB}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{F8DC72AD-912E-48EC-8921-A274EFFE214E}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"TCP Query User{065E90AE-0F6A-4512-88C6-4A212C448059}D:\cod2\cod2mp_s.exe" = protocol=6 | dir=in | app=d:\cod2\cod2mp_s.exe |
"TCP Query User{078CED54-0AF5-498C-B387-4AB0794A7AE6}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{4BC69339-A175-47C3-9AC6-6B6DD935967E}C:\program files\turbine\ddo unlimited\dndclient.exe" = protocol=6 | dir=in | app=c:\program files\turbine\ddo unlimited\dndclient.exe |
"TCP Query User{53B26D25-1437-43BB-90A4-56DF8BC33FFE}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{6FB158C8-808C-41A7-849A-4F987C7D204D}D:\gunbound\english\gunbound revolution\gunbound.gme" = protocol=6 | dir=in | app=d:\gunbound\english\gunbound revolution\gunbound.gme |
"TCP Query User{79B742FF-58FE-4177-B1CA-4DE2FEEFE28E}C:\program files\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"TCP Query User{7BAE9358-F2DB-431C-811E-42A88F580916}C:\program files\soldat\soldat.exe" = protocol=6 | dir=in | app=c:\program files\soldat\soldat.exe |
"TCP Query User{B83E4183-91A3-424E-9D05-97214B8B9D3A}C:\program files\aim6\aim6.exe" = protocol=6 | dir=in | app=c:\program files\aim6\aim6.exe |
"TCP Query User{C652A390-E713-40E0-9D53-858CA2572A98}C:\ijji\english\u_gbound.exe" = protocol=6 | dir=in | app=c:\ijji\english\u_gbound.exe |
"TCP Query User{D375E8FC-6D49-4FAD-AA6C-4670B5DC2B17}C:\program files\veoh networks\veoh\veohclient.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veoh\veohclient.exe |
"TCP Query User{D881187B-F1AB-472E-B5B0-A50F5A547667}C:\program files\aim6\aim6.exe" = protocol=6 | dir=in | app=c:\program files\aim6\aim6.exe |
"TCP Query User{DFEC9A2E-7102-4468-A89A-F9780CB0AADC}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"TCP Query User{EFC82841-DCF2-4C98-93EB-4725D336D90B}C:\program files\itunes\itunes.exe" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"UDP Query User{078566DB-8A5F-41B3-B052-4591EC743570}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{19FD3DD7-CD85-4781-83B2-B466BCC122D6}C:\program files\itunes\itunes.exe" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"UDP Query User{2282CE26-43D3-4B84-A92F-E8AC71B8A2AD}C:\program files\turbine\ddo unlimited\dndclient.exe" = protocol=17 | dir=in | app=c:\program files\turbine\ddo unlimited\dndclient.exe |
"UDP Query User{27517740-0A74-4330-A8CE-BD50C5FDEC95}C:\program files\soldat\soldat.exe" = protocol=17 | dir=in | app=c:\program files\soldat\soldat.exe |
"UDP Query User{4F8D8C7E-C145-46A8-A526-4B5457D483C7}D:\cod2\cod2mp_s.exe" = protocol=17 | dir=in | app=d:\cod2\cod2mp_s.exe |
"UDP Query User{83106407-E57B-4E3A-B49E-FA67441101B7}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"UDP Query User{85692A27-0442-4D97-A3BF-88E58D71D202}C:\program files\aim6\aim6.exe" = protocol=17 | dir=in | app=c:\program files\aim6\aim6.exe |
"UDP Query User{8F0EC435-EE28-4D34-9EF9-D273C5E667E2}C:\ijji\english\u_gbound.exe" = protocol=17 | dir=in | app=c:\ijji\english\u_gbound.exe |
"UDP Query User{9C1283CC-AB29-4748-A316-E69F3099B66F}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{9F0603D5-531C-4468-8684-BAE8D0DC1CBF}C:\program files\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"UDP Query User{B9CFC9E6-B825-48AA-B2F7-E3854B9D3FC5}D:\gunbound\english\gunbound revolution\gunbound.gme" = protocol=17 | dir=in | app=d:\gunbound\english\gunbound revolution\gunbound.gme |
"UDP Query User{C5438159-1E55-4255-8A02-59200CCFF103}C:\program files\aim6\aim6.exe" = protocol=17 | dir=in | app=c:\program files\aim6\aim6.exe |
"UDP Query User{E42B41E3-44C2-455A-BF2B-4BD8B19D9832}C:\program files\veoh networks\veoh\veohclient.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veoh\veohclient.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"{06F9A3FA-0801-E4CB-42D4-C94C2C91B6EB}" = Catalyst Control Center Localization Finnish
"{0CB9668D-F979-4F31-B8B8-67FE90F929F8}" = Bonjour
"{0FD189D1-6277-EA4A-1627-CEE4B389E829}" = Catalyst Control Center Localization German
"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}" = ASUS Data Security Manager
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = LifeFrame2
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{212B0DA4-05D4-A208-2A9C-5F8DD2980E85}" = Skins
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java(TM) 6 Update 17
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{2C071160-1A0B-BA42-6725-F4FA5096643F}" = Catalyst Control Center Localization Portuguese
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{2F29D6D2-824E-4FEF-8AED-7013F39F642A}" = OpenOffice.org 2.3
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{3279DD64-A2A3-0160-5F6E-6E7CB23DDBCF}" = Catalyst Control Center Localization Czech
"{32F64B84-DDA9-2BE3-7AC8-247029E8FD7C}" = CCC Help Spanish
"{3498E3BE-4CBC-31FF-9629-2055B0D4D6AA}" = Catalyst Control Center Localization Dutch
"{352E48CA-72CD-37A5-3328-26F043C1F20B}" = CCC Help Dutch
"{36FA65A5-472E-5B34-5AF6-4C3EAC37FAF4}" = CCC Help Hungarian
"{3705E4BF-FC82-69A1-FA4C-3BE75CE3F1CE}" = CCC Help Chinese Traditional
"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{432B5E70-CCB0-74B6-8F53-FB1D25307914}" = CCC Help Chinese Standard
"{46DF6691-16D3-0CAD-73AE-79B9C1F89395}" = Catalyst Control Center Localization Italian
"{4EAE7E85-3D5C-EE7D-0CF5-047B7BF31F6F}" = CCC Help Japanese
"{4FB8E3E7-2E58-CA03-6080-1ED58BEA15E8}" = Catalyst Control Center Graphics Full New
"{54DF7BDA-1058-4D53-B3D4-2344C69B7D0C}" = Ragnarok Online
"{559E8105-E24B-9B72-95A4-751C9CB0AE3D}" = Catalyst Control Center Localization Spanish
"{57824A5B-D439-0A7F-5D5F-068E77A8715A}" = CCC Help Danish
"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun
"{587B9972-551D-544A-97A5-7607AA5ABFD6}" = CCC Help Turkish
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2
"{5C49D033-09D0-65FB-16DB-23393187A9BD}" = Catalyst Control Center Localization Hungarian
"{5CF34882-4D7A-08E1-E59C-D931F7571295}" = ccc-core-static
"{5E9CCAC3-7190-E2B2-790C-4F107F2D54F3}" = CCC Help Russian
"{614F346A-1312-E363-9A38-56F35CAE727E}" = CCC Help Finnish
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{66491E5A-7899-4863-A2E9-057E10BCB578}" = Samsung SecretZone
"{6654D486-B25D-EAD9-CF29-3FAC8DBABFF4}" = Catalyst Control Center Localization Polish
"{6790911B-8A0E-E263-61D1-364E78076830}" = Catalyst Control Center Graphics Light
"{6881665C-A3EF-3773-BA37-7704D06C88D8}" = CCC Help Czech
"{68D33A7D-4CA0-9C0C-C204-BCD18DB88EB5}" = Catalyst Control Center Localization Turkish
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6B4377E0-F072-2EB4-F557-1540B93C737B}" = Catalyst Control Center Localization Greek
"{6D39F08A-F1A0-3FCA-A57E-26038418F962}" = Catalyst Control Center Graphics Previews Vista
"{703F12C9-23C3-D34A-82D7-A2A011DA05A8}" = Catalyst Control Center Graphics Full Existing
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B4A5C13-069F-4AFE-AE57-C497B4E33C7E}" = Call of Duty(R) 2 Patch 1.3
"{7B88A74D-E198-6006-9BDB-CBAE09D35AD0}" = CCC Help Polish
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{85991ED2-010C-4930-96FA-52F43C2CE98A}" = Apple Mobile Device Support
"{85ADEC54-8622-4EEE-549B-959006FB5146}" = CCC Help Portuguese
"{8815D569-BD1A-AAFE-BEAA-EED8BD4E959D}" = CCC Help German
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{8AC977DE-0B09-1B19-9753-E770BB51889D}" = Catalyst Control Center Localization French
"{8CFEBE9C-F29F-4C49-80E0-7106970F8734}" = Power4Gear eXtreme
"{90120000-0015-0404-0000-0000000FF1CE}" = Microsoft Office Access MUI (Chinese (Traditional)) 2007
"{90120000-0015-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
"{90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0804-0000-0000000FF1CE}" = Microsoft Office Access MUI (Chinese (Simplified)) 2007
"{90120000-0015-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2007
"{90120000-0015-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0404-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Chinese (Traditional)) 2007
"{90120000-0016-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
"{90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0804-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Chinese (Simplified)) 2007
"{90120000-0016-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007
"{90120000-0016-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0404-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007
"{90120000-0018-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
"{90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0804-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Chinese (Simplified)) 2007
"{90120000-0018-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007
"{90120000-0018-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0404-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Chinese (Traditional)) 2007
"{90120000-0019-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
"{90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0804-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Chinese (Simplified)) 2007
"{90120000-0019-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2007
"{90120000-0019-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0404-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Chinese (Traditional)) 2007
"{90120000-001A-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
"{90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0804-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Chinese (Simplified)) 2007
"{90120000-001A-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2007
"{90120000-001A-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0404-0000-0000000FF1CE}" = Microsoft Office Word MUI (Chinese (Traditional)) 2007
"{90120000-001B-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
"{90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0804-0000-0000000FF1CE}" = Microsoft Office Word MUI (Chinese (Simplified)) 2007
"{90120000-001B-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007
"{90120000-001B-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_PROHYBRIDR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007
"{90120000-001F-0403-0000-0000000FF1CE}_PROHYBRIDR_{4B47C31E-46B0-462B-BEE4-DC383B6A1F2A}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0404-0000-0000000FF1CE}" = Microsoft Office Proof (Chinese (Traditional)) 2007
"{90120000-001F-0404-0000-0000000FF1CE}_PROHYBRIDR_{33FA7680-10ED-444E-BC72-214064317283}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_PROHYBRIDR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007
"{90120000-001F-0416-0000-0000000FF1CE}_PROHYBRIDR_{75EBE365-7FC5-4720-A7D3-804BF550D1BC}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007
"{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007
"{90120000-001F-0804-0000-0000000FF1CE}" = Microsoft Office Proof (Chinese (Simplified)) 2007
"{90120000-001F-0804-0000-0000000FF1CE}_PROHYBRIDR_{82E853AD-6911-4EA9-9EB0-2F9BE7747878}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0028-0404-0000-0000000FF1CE}" = Microsoft Office IME (Chinese (Traditional)) 2007
"{90120000-0028-0404-0000-0000000FF1CE}_PROHYBRIDR_{5E6C6E79-40BE-491B-9ABF-C665667E1B07}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0028-0804-0000-0000000FF1CE}" = Microsoft Office IME (Chinese (Simplified)) 2007
"{90120000-0028-0804-0000-0000000FF1CE}_PROHYBRIDR_{4029CB10-E410-41AD-BB3F-052C95243407}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0404-0000-0000000FF1CE}" = Microsoft Office Proofing (Chinese (Traditional)) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
"{90120000-002C-0804-0000-0000000FF1CE}" = Microsoft Office Proofing (Chinese (Simplified)) 2007
"{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007
"{90120000-006E-0404-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Chinese (Traditional)) 2007
"{90120000-006E-0404-0000-0000000FF1CE}_PROHYBRIDR_{3F96DD0A-F509-4CBD-8130-B3B3194A9C3D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
"{90120000-006E-040C-0000-0000000FF1CE}_PROHYBRIDR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0804-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Chinese (Simplified)) 2007
"{90120000-006E-0804-0000-0000000FF1CE}_PROHYBRIDR_{A844CE03-EE56-4609-808D-946E33AA9236}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007
"{90120000-006E-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{6113C11D-BACA-4D8E-8002-03C8D06FD5E6}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91E74F52-EB7E-2733-375C-53E24FD00985}" = Catalyst Control Center Localization Russian
"{91F7F3F3-CE80-48C3-8327-7D24A0A5716A}" = iTunes
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96D800B4-8AED-D0FC-306F-A7F25D9A8488}" = CCC Help Greek
"{97F32DF8-D66E-446A-A425-C1D7B45C1033}" = Nero 7 Essentials
"{987077A3-B3C8-BA47-941F-B98B0AD450A0}" = Catalyst Control Center Localization Chinese Traditional
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D53F86A-AACF-884F-AF42-4C9B62EC6340}" = ccc-utility
"{9D872C19-3094-703E-5497-D9726ACC414D}" = CCC Help Swedish
"{9F03A950-260D-82AF-891B-F16F913AA1E9}" = CCC Help French
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}" = Apple Application Support
"{A96F33D1-73AE-EA0F-1BF3-959866E9CF16}" = Catalyst Control Center Localization Danish
"{AB2C2C26-A7FE-6803-0348-0B63362C189E}" = Catalyst Control Center Localization Chinese Standard
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.5
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B5B7C299-628A-1BA9-3E5A-8FC65F1EFD11}" = Catalyst Control Center Localization Thai
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology
"{C4F9B11D-66FA-AA1D-4905-A4B8068B7E7B}" = Catalyst Control Center Localization Korean
"{C5640C83-9BF8-CF45-8593-7F4003B674D1}" = CCC Help Korean
"{C6EBC8AE-7527-15F8-018B-677368CCF777}" = Catalyst Control Center Localization Japanese
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDBF4B7F-8253-ED82-5F45-612C917CC2D1}" = CCC Help Italian
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{CF5806F8-A369-D6ED-B8A0-EEF3067660D4}" = Catalyst Control Center Core Implementation
"{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{D7E04009-B191-4E9D-9D2D-1BBE57BD8A42}" = VistaFeaturePack
"{DA5F0136-AA63-618F-7AAC-08AF4CC5983C}" = CCC Help English
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{DFABF691-75BE-ABCF-C432-8223FF9136F9}" = CCC Help Norwegian
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E802C8CF-F321-B433-902B-A34437A18E1E}" = Catalyst Control Center Localization Swedish
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F2A2B193-6837-8DEE-39D0-D5AE5F5DDC2B}" = ATI Catalyst Install Manager
"{F8B90B70-EBCF-CC88-765E-5C0167A46A13}" = CCC Help Thai
"{FA02ACAC-9E14-4878-A257-92A22A647C2C}" = LG USB Modem Drivers
"{FB7A7A11-CD15-DE8F-C3B4-567624B74F24}" = Catalyst Control Center Localization Norwegian
"{FC3D290D-79BE-44B7-ABF9-FDD110925930}" = PowerForPhone
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AMP Calendar" = AMP Calendar
"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver
"avast5" = avast! Free Antivirus
"Contour Storyteller 3.0.2" = Contour Storyteller
"EPSON Printer and Utilities" = EPSON Printer Software
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"InstallShield_{D7E04009-B191-4E9D-9D2D-1BBE57BD8A42}" = VistaFeaturePack
"Live 8.1.1" = Live 8.1.1
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"PowerISO" = PowerISO
"PROHYBRIDR" = 2007 Microsoft Office system
"RealPlayer 12.0" = RealPlayer
"SMSERIAL" = Motorola SM56 Speakerphone Modem
"Unlocker" = Unlocker 1.8.9
"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam
"V CAST Music with Rhapsody" = V CAST Music with Rhapsody
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VLC media player 1.0.3
"Winamp" = Winamp
"WinRAR archiver" = WinRAR archiver
"Yahoo! Mail" = Yahoo! Internet Mail
"YInstHelper" = Yahoo! Install Manager

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 12/13/2010 4:28:03 PM | Computer Name = purin-PC | Source = Application Error | ID = 1000
Description = Faulting application LiveUpdt.exe, version 2.0.0.0, time stamp 0x46b06e0b,
faulting module kernel32.dll, version 6.0.6002.18005, time stamp 0x49e037dd, exception
code 0xe06d7363, fault offset 0x0003fbae, process id 0xa8c, application start time
0x01cb9b03ce2cadf6.

Error - 12/13/2010 4:45:33 PM | Computer Name = purin-PC | Source = Application Error | ID = 1000
Description = Faulting application LiveUpdt.exe, version 2.0.0.0, time stamp 0x46b06e0b,
faulting module kernel32.dll, version 6.0.6002.18005, time stamp 0x49e037dd, exception
code 0xe06d7363, fault offset 0x0003fbae, process id 0x580, application start time
0x01cb9b064e136841.

Error - 12/13/2010 5:22:51 PM | Computer Name = purin-PC | Source = Bonjour Service | ID = 100
Description =

Error - 12/13/2010 5:22:51 PM | Computer Name = purin-PC | Source = Bonjour Service | ID = 100
Description =

Error - 12/13/2010 5:22:51 PM | Computer Name = purin-PC | Source = Bonjour Service | ID = 100
Description =

Error - 12/13/2010 11:51:43 PM | Computer Name = purin-PC | Source = Application Error | ID = 1000
Description = Faulting application _D85D.tmp, version 0.0.0.0, time stamp 0x47625e27,
faulting module _D85D.tmp, version 0.0.0.0, time stamp 0x47625e27, exception code
0xc0000005, fault offset 0x0004ce63, process id 0xe84, application start time 0x01cb9b422a1c0000.

Error - 12/13/2010 11:52:20 PM | Computer Name = purin-PC | Source = MsiInstaller | ID = 11904
Description =

Error - 12/13/2010 11:52:32 PM | Computer Name = purin-PC | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe_PlugPlay, version 6.0.6001.18000,
time stamp 0x47918b89, faulting module ntdll.dll, version 6.0.6002.18005, time
stamp 0x49e03821, exception code 0xc0000005, fault offset 0x00041321, process id
0x3d0, application start time 0x01cb9b049bebf1b1.

Error - 12/13/2010 11:54:50 PM | Computer Name = purin-PC | Source = Application Error | ID = 1000
Description = Faulting application SE2011.exe, version 0.0.0.0, time stamp 0x4762cb9d,
faulting module SE2011.exe, version 0.0.0.0, time stamp 0x4762cb9d, exception code
0xc0000005, fault offset 0x00687ed8, process id 0xb30, application start time 0x01cb9b42a374eca8.

Error - 12/14/2010 12:04:15 AM | Computer Name = purin-PC | Source = Application Error | ID = 1000
Description = Faulting application SE2011.exe, version 0.0.0.0, time stamp 0x4762cb9d,
faulting module SE2011.exe, version 0.0.0.0, time stamp 0x4762cb9d, exception code
0xc0000005, fault offset 0x00687ed8, process id 0xb6c, application start time 0x01cb9b43f606d7e3.

[ Media Center Events ]
Error - 6/2/2008 7:57:06 PM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package MCESpotlight.

Error - 6/3/2008 7:39:49 AM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package MCESpotlight.

Error - 6/6/2008 7:05:44 PM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package MCESpotlight.

Error - 6/7/2008 5:33:53 AM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package MCESpotlight.

Error - 6/7/2008 5:31:04 PM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package MCESpotlight.

Error - 6/9/2008 12:38:59 PM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package MCESpotlight.

Error - 7/21/2008 6:31:50 PM | Computer Name = purin-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 4/28/2009 11:43:15 PM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 4/30/2009 12:39:59 AM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 6/23/2009 1:30:05 PM | Computer Name = purin-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

[ OSession Events ]
Error - 9/21/2009 1:18:10 PM | Computer Name = purin-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2
seconds with 0 seconds of active time. This session ended with a crash.

Error - 9/30/2009 7:14:47 PM | Computer Name = purin-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 12/28/2010 4:31:21 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 12/28/2010 3:15:01 PM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7011
Description =

Error - 12/28/2010 3:15:40 PM | Computer Name = purin-PC | Source = DCOM | ID = 10010
Description =

Error - 12/29/2010 12:37:20 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 12/29/2010 12:37:20 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 12/29/2010 12:37:20 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 12/29/2010 12:37:20 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 12/29/2010 12:37:20 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 12/29/2010 12:37:20 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 12/29/2010 12:37:20 AM | Computer Name = purin-PC | Source = Service Control Manager | ID = 7000
Description =


< End of report >

 

Sorry I'll use PM next time I couldn't find it earlier, maybe it was because I wasn't logged in. Anyhow...

I went about the directions you provided and Java went as planned, but the OTL custom fix did not work. When I applied the custom fix my computer will restart but the desktop will not appear. There was a black screen with the mouse on it and I could not access the desktop. I could CTRL+ALT+DEL, but it still won't allow me onto the desktop. I used system restore to undo those changes. Please advise.

Also, when Avast blocked the trojan, quite some time ago, this is what it read in the window: Object: C:\Windows\System32\inetpage10.dll - Infection: Win32:Crypt-IEP [Trj] - Action: Moved to chest - Process: C:\Windows\System32\svchost.exe