Solved Internet Explorer Crashes

Ken · 2011/08/09

Ran OTL fix, no report.
Re-start.
Ran OTL fix again, error creating log file.
Re-start
Ran OTL quick scan.
OTL logfile created on: 8/9/2011 9:47:11 AM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Kenneth\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

509.98 Mb Total Physical Memory | 154.39 Mb Available Physical Memory | 30.27% Memory free
1.22 Gb Paging File | 0.90 Gb Available in Paging File | 74.08% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 71.46 Gb Total Space | 47.02 Gb Free Space | 65.80% Space Free | Partition Type: NTFS

Computer Name: KGBNEW | User Name: Kenneth | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/08/06 07:59:36 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kenneth\Desktop\OTL.exe
PRC - [2011/07/06 19:52:38 | 000,449,584 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011/07/06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011/07/04 07:43:54 | 003,493,720 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011/07/04 07:43:51 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011/05/20 11:28:44 | 000,273,544 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2010/08/23 21:21:40 | 000,013,672 | ---- | M] (Intuit Inc.) -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
PRC - [2009/05/21 10:55:38 | 001,025,264 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\gs_agent\dsc.exe
PRC - [2009/05/21 10:55:32 | 000,206,064 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe
PRC - [2008/08/13 19:32:40 | 000,201,968 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe
PRC - [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/01/16 23:36:48 | 000,304,624 | ---- | M] () -- C:\Program Files\Dell Photo AIO Printer 944\memcard.exe
PRC - [2007/01/16 23:36:28 | 000,431,600 | ---- | M] (Dell) -- C:\Program Files\Dell Photo AIO Printer 944\dlcdmon.exe
PRC - [2007/01/16 23:34:36 | 000,538,096 | ---- | M] ( ) -- C:\WINDOWS\system32\dlcdcoms.exe

========== Modules (SafeList) ==========

MOD - [2011/08/06 07:59:36 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kenneth\Desktop\OTL.exe
MOD - [2011/07/04 07:43:51 | 000,199,792 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll
MOD - [2010/08/23 12:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011/07/06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011/07/04 07:43:51 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/08/23 21:21:40 | 000,013,672 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe -- (IntuitUpdateService)
SRV - [2008/08/13 19:32:40 | 000,201,968 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter)
SRV - [2007/03/07 15:47:46 | 000,076,848 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\DellSupport\brkrsvc.exe -- (DSBrokerService)
SRV - [2007/01/16 23:34:36 | 000,538,096 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\dlcdcoms.exe -- (dlcd_device)
SRV - [2006/12/11 22:16:32 | 000,064,248 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe -- (Roxio UPnP Renderer 9)
SRV - [2006/12/11 22:16:28 | 000,301,816 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe -- (Roxio Upnp Server 9)

========== Driver Services (SafeList) ==========

DRV - [2011/07/06 19:52:42 | 000,022,712 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011/07/04 07:36:43 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011/07/04 07:36:32 | 000,309,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011/07/04 07:35:23 | 000,043,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011/07/04 07:35:12 | 000,102,616 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011/07/04 07:32:32 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011/07/04 07:32:13 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011/07/04 07:32:12 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/02/11 08:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2007/02/25 12:10:48 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\dsunidrv.sys -- (dsunidrv)
DRV - [2006/10/05 16:07:28 | 000,004,736 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand | Stopped] -- C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys -- (DSproct)
DRV - [2005/04/07 17:18:34 | 000,003,840 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\BANTExt.sys -- (BANTExt)
DRV - [2004/09/17 16:02:54 | 000,732,928 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt)
DRV - [2004/06/16 05:52:40 | 000,061,157 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\IntelC53.sys -- (IntelC53)
DRV - [2004/03/06 06:15:34 | 000,647,929 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\IntelC52.sys -- (IntelC52)
DRV - [2004/03/06 06:14:42 | 001,233,525 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\IntelC51.sys -- (IntelC51)
DRV - [2004/03/06 06:13:38 | 000,037,048 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mohfilt.sys -- (mohfilt)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com/ig/dell?hl=en

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = AB 4E EA 0C 33 31 8E 48 A7 2D 02 F8 4E BF B8 A8 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.647: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.647: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/05/20 11:29:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/07/29 09:27:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.2\extensions\\Components: C:\Program Files\SeaMonkey\components [2011/07/22 07:42:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey 2.2\extensions\\Plugins: C:\Program Files\SeaMonkey\plugins [2011/07/22 07:42:32 | 000,000,000 | ---D | M]

[2009/11/02 18:57:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kenneth\Application Data\Mozilla\Extensions
[2009/11/02 18:57:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kenneth\Application Data\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
[2011/08/03 08:38:13 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kenneth\Application Data\Mozilla\Firefox\Profiles\8wzp06h5.default\extensions
[2011/07/23 08:28:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kenneth\Application Data\Mozilla\SeaMonkey\Profiles\1d93tk2p.default\extensions
[2011/08/07 13:14:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/08/07 13:14:04 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) --
[2010/05/26 08:36:25 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2009/09/01 20:34:32 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/07/08 03:16:28 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/01/01 04:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml

O1 HOSTS File: ([2011/08/03 08:39:48 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (SBCONVERT Class) - {3017FB3E-9A77-4396-88C5-0EC9548FB42F} - C:\Program Files\SpeedBit Video Downloader\TBUB2\tbcore3.dll ()
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (SearchPredictObj Class) - {389943B0-C3A2-4E69-82CB-8596A84CB3DC} - C:\Program Files\SearchPredict\SearchPredict.dll (Speedbit Ltd.)
O2 - BHO: (Softonic-Eng7 Toolbar) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (SBCONVERT Class) - {A1056498-D09A-41E4-864B-505EDD640D9E} - C:\Program Files\SpeedBit Video Downloader\Toolbar\SpeedBitVideoDownloader.dll ()
O2 - BHO: (no name) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - No CLSID value found.
O2 - BHO: (GrabberObj Class) - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\SpeedBit Video Downloader\TBUB2\Grabber.dll (Speedbit Ltd.)
O3 - HKLM\..\Toolbar: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\TBUB2\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Softonic-Eng7 Toolbar) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\ShellBrowser: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\TBUB2\tbcore3.dll ()
O3 - HKCU\..\Toolbar\ShellBrowser: (Softonic-Eng7 Toolbar) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\TBUB2\tbcore3.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Softonic-Eng7 Toolbar) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DLCDCATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCDtime.DLL ()
O4 - HKLM..\Run: [dlcdmon.exe] C:\Program Files\Dell Photo AIO Printer 944\dlcdmon.exe (Dell)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [MemoryCardManager] C:\Program Files\Dell Photo AIO Printer 944\memcard.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - Startup: C:\Documents and Settings\Kenneth\Start Menu\Programs\Startup\Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O15 - HKCU\..Trusted Domains: aol.com ([free] http in Trusted sites)
O15 - HKCU\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKCU\..Trusted Domains: turbotax.com ([]https in Trusted sites)
O16 - DPF: {4EC99A0B-E57C-4FBE-B9C4-8428424FBF88} http://supportcenter.verizon.net/euserv/jsp/VOLAWeb.cab (McciUtilsSpecialFolder Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {DB0474CC-8EF6-47FC-905B-23FC58A70817} https://download.verizon.net/sfp/Cabs/hst/webinstall/HstWebInstall.cab (RegPropsCtrl Class)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/12/31 12:35:41 | 000,000,018 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2004/08/10 15:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BIT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/07 15:52:27 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2011/08/07 15:50:52 | 002,322,184 | ---- | C] (ESET) -- C:\Documents and Settings\Kenneth\Desktop\esetsmartinstaller_enu.exe
[2011/08/07 14:55:37 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Kenneth\Desktop\TFC.exe
[2011/08/06 07:59:16 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Kenneth\Desktop\OTL.exe
[2011/08/05 13:57:33 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\Program Files\mspaint.exe
[2011/08/05 13:19:05 | 000,413,696 | ---- | C] (Dell) -- C:\WINDOWS\System32\dlcddrs.dll
[2011/08/05 13:19:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Dell Printers
[2011/08/05 13:18:59 | 000,000,000 | ---D | C] -- C:\Program Files\Dell Photo AIO Printer 944
[2011/08/05 13:18:18 | 000,323,584 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdhcp.dll
[2011/08/05 13:18:17 | 000,413,696 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdinpa.dll
[2011/08/05 13:18:17 | 000,397,312 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdiesc.dll
[2011/08/05 13:18:15 | 001,224,704 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdserv.dll
[2011/08/05 13:18:15 | 000,991,232 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdusb1.dll
[2011/08/05 13:18:14 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdprox.dll
[2011/08/05 13:18:14 | 000,094,208 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdpplc.dll
[2011/08/05 13:18:13 | 000,643,072 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdpmui.dll
[2011/08/05 13:18:12 | 000,585,728 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdlmpm.dll
[2011/08/05 13:18:10 | 000,386,544 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdih.exe
[2011/08/05 13:18:09 | 000,696,320 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdhbn3.dll
[2011/08/05 13:18:07 | 000,538,096 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdcoms.exe
[2011/08/05 13:18:06 | 000,421,888 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdcomm.dll
[2011/08/05 13:18:05 | 000,684,032 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdcomc.dll
[2011/08/05 13:18:05 | 000,382,448 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcdcfg.exe
[2011/08/05 07:05:03 | 000,000,000 | ---D | C] -- C:\spoolerlogs
[2011/08/04 18:39:15 | 000,083,968 | ---- | C] (eSage Lab) -- C:\Documents and Settings\Kenneth\Desktop\remover.exe
[2011/08/04 18:38:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\7-Zip
[2011/08/04 16:26:32 | 000,000,000 | ---D | C] -- C:\Program Files\Carbonite
[2011/08/04 16:26:32 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2011/08/04 16:26:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2011/08/04 16:26:31 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2011/08/04 16:26:28 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2011/08/04 16:26:28 | 000,000,000 | ---D | C] -- C:\Program Files\MSN
[2011/08/04 16:26:28 | 000,000,000 | ---D | C] -- C:\Program Files\Motive
[2011/08/04 16:26:27 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2011/08/04 16:26:27 | 000,000,000 | ---D | C] -- C:\Program Files\Users
[2011/08/04 16:26:27 | 000,000,000 | ---D | C] -- C:\Program Files\The Weather Channel FW
[2011/08/04 09:12:47 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2011/08/03 14:42:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\FxsTmp
[2011/08/03 10:01:52 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011/08/03 08:54:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kenneth\Application Data\PriceGong
[2011/08/03 08:12:08 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/08/03 08:07:12 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/08/03 08:07:12 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/08/03 08:07:12 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/08/03 08:07:12 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/08/03 08:06:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011/08/03 08:06:35 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/08/03 08:04:40 | 004,163,262 | R--- | C] (Swearware) -- C:\Documents and Settings\Kenneth\Desktop\ComboFix.exe
[2011/07/31 19:41:37 | 000,000,000 | ---D | C] -- C:\System Cleaners
[2011/07/30 16:20:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kenneth\Application Data\Malwarebytes
[2011/07/30 16:20:50 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/07/30 16:20:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/07/30 16:20:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/07/30 16:20:45 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/07/30 16:20:44 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/07/29 09:27:15 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011/07/20 10:09:52 | 000,000,000 | ---D | C] -- C:\ftm
[2011/07/19 19:29:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie7updates
[2011/07/19 19:26:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/09 10:11:00 | 000,000,888 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/09 09:43:18 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/09 09:43:18 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2216002632-2257328244-1610888821-1006.job
[2011/08/09 09:42:56 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/08/09 09:42:55 | 534,827,008 | -HS- | M] () -- C:\hiberfil.sys
[2011/08/07 15:51:01 | 002,322,184 | ---- | M] (ESET) -- C:\Documents and Settings\Kenneth\Desktop\esetsmartinstaller_enu.exe
[2011/08/07 14:55:45 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kenneth\Desktop\TFC.exe
[2011/08/07 14:49:40 | 000,879,028 | ---- | M] () -- C:\Documents and Settings\Kenneth\Desktop\SecurityCheck.exe
[2011/08/06 07:59:36 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Kenneth\Desktop\OTL.exe
[2011/08/05 17:34:30 | 000,000,082 | ---- | M] () -- C:\WINDOWS\MPLAYER.INI
[2011/08/05 15:17:30 | 000,000,608 | ---- | M] () -- C:\Documents and Settings\Kenneth\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to notepad.lnk
[2011/08/05 14:05:16 | 000,000,584 | ---- | M] () -- C:\Documents and Settings\Kenneth\Application Data\Microsoft\Internet Explorer\Quick Launch\mspaint.lnk
[2011/08/05 14:02:20 | 000,001,010 | ---- | M] () -- C:\WINDOWS\Ulead32.ini
[2011/08/05 13:22:32 | 000,014,679 | ---- | M] () -- C:\WINDOWS\System32\LexFiles.ulf
[2011/08/05 09:30:57 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011/08/04 17:07:43 | 000,000,290 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2216002632-2257328244-1610888821-1006.job
[2011/08/04 16:33:06 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/08/03 19:55:12 | 000,039,605 | ---- | M] () -- C:\Documents and Settings\Kenneth\Desktop\bootkit_remover.rar
[2011/08/03 16:02:30 | 000,001,071 | ---- | M] () -- C:\WINDOWS\AWMODEM.INF
[2011/08/03 14:43:01 | 000,477,832 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/08/03 14:43:01 | 000,086,740 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/08/03 14:42:50 | 000,001,066 | ---- | M] () -- C:\WINDOWS\System32\mapisvc.inf
[2011/08/03 14:36:12 | 000,003,690 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/08/03 08:39:48 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011/08/03 08:05:08 | 004,163,262 | R--- | M] (Swearware) -- C:\Documents and Settings\Kenneth\Desktop\ComboFix.exe
[2011/07/30 16:20:50 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/07/30 15:49:08 | 000,000,230 | ---- | M] () -- C:\WINDOWS\System32\spupdsvc.inf
[2011/07/29 09:27:21 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Kenneth\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/29 09:27:20 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/07/27 21:19:10 | 000,000,068 | ---- | M] () -- C:\WINDOWS\System32\1917917430
[2011/07/19 17:53:08 | 000,250,288 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/07/19 16:21:58 | 000,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/07/19 16:11:19 | 000,001,700 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/07 14:49:36 | 000,879,028 | ---- | C] () -- C:\Documents and Settings\Kenneth\Desktop\SecurityCheck.exe
[2011/08/05 15:17:30 | 000,000,608 | ---- | C] () -- C:\Documents and Settings\Kenneth\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to notepad.lnk
[2011/08/05 13:19:48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\dlcdvs.dll
[2011/08/05 13:19:40 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\dlcdcoin.dll
[2011/08/05 13:19:19 | 000,126,059 | ---- | C] () -- C:\WINDOWS\System32\dlcdceip.chm
[2011/08/05 13:19:04 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\dlcdcnv4.dll
[2011/08/05 13:18:18 | 000,274,432 | ---- | C] () -- C:\WINDOWS\System32\dlcdinst.dll
[2011/08/05 13:18:16 | 000,434,176 | ---- | C] () -- C:\WINDOWS\System32\dlcdutil.dll
[2011/08/05 13:18:12 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\dlcdjswr.dll
[2011/08/05 13:18:11 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\dlcdinsb.dll
[2011/08/05 13:18:11 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\dlcdinsr.dll
[2011/08/05 13:18:10 | 000,257,112 | ---- | C] () -- C:\WINDOWS\System32\dlcdhelp.chm
[2011/08/05 13:18:10 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\dlcdins.dll
[2011/08/05 13:18:08 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\dlcdcub.dll
[2011/08/05 13:18:07 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\dlcdcu.dll
[2011/08/05 13:18:07 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\dlcdcur.dll
[2011/08/05 13:18:04 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\dlcdcfg.dll
[2011/08/05 13:18:04 | 000,002,123 | ---- | C] () -- C:\WINDOWS\System32\dlcd.loc
[2011/08/03 19:55:09 | 000,039,605 | ---- | C] () -- C:\Documents and Settings\Kenneth\Desktop\bootkit_remover.rar
[2011/08/03 14:42:24 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2011/08/03 14:42:24 | 000,001,361 | ---- | C] () -- C:\WINDOWS\System32\fxscount.h
[2011/08/03 08:12:21 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011/08/03 08:12:19 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2011/08/03 08:07:12 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/08/03 08:07:12 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/08/03 08:07:12 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/08/03 08:07:12 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/08/03 08:07:12 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/07/30 16:20:50 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/07/30 15:49:08 | 000,000,230 | ---- | C] () -- C:\WINDOWS\System32\spupdsvc.inf
[2011/07/29 09:27:21 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\Kenneth\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/29 09:27:20 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/07/29 09:27:20 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/07/27 21:19:08 | 000,000,068 | ---- | C] () -- C:\WINDOWS\System32\1917917430
[2009/06/08 07:47:10 | 000,118,784 | ---- | C] () -- C:\WINDOWS\GREUninstall.exe
[2008/03/05 09:09:33 | 000,003,072 | ---- | C] () -- C:\Documents and Settings\Kenneth\Application Data\DMX.bmk
[2007/05/18 14:39:36 | 000,000,184 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007/02/05 16:27:01 | 000,000,088 | RHS- | C] () -- C:\WINDOWS\System32\2F2E35F313.sys
[2006/07/16 18:51:35 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2006/07/15 14:56:49 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2006/02/12 17:13:29 | 000,061,678 | ---- | C] () -- C:\Documents and Settings\Kenneth\Application Data\PFP120JPR.{PB
[2006/02/12 17:13:29 | 000,012,358 | ---- | C] () -- C:\Documents and Settings\Kenneth\Application Data\PFP120JCM.{PB
[2006/02/08 19:38:30 | 000,011,776 | ---- | C] () -- C:\Documents and Settings\Kenneth\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/02/07 12:33:28 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Kenneth\Local Settings\Application Data\fusioncache.dat
[2006/02/06 18:44:22 | 000,002,560 | ---- | C] () -- C:\WINDOWS\_MSRSTRT.EXE
[2006/02/01 09:19:03 | 000,000,031 | ---- | C] () -- C:\WINDOWS\MSBACKUP.INI
[2006/01/17 12:52:38 | 000,000,024 | ---- | C] () -- C:\WINDOWS\SOL.INI
[2006/01/11 18:38:37 | 000,001,010 | ---- | C] () -- C:\WINDOWS\Ulead32.ini
[2006/01/10 16:11:03 | 000,000,225 | ---- | C] () -- C:\WINDOWS\netscape.INI
[2006/01/10 10:05:46 | 000,634,087 | ---- | C] () -- C:\WINDOWS\cd32.exe
[2006/01/05 16:45:56 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2006/01/04 19:42:46 | 000,000,592 | ---- | C] () -- C:\Documents and Settings\Kenneth\Local Settings\Application Data\FASTWiz.html
[2006/01/03 16:34:13 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS3m.DLL
[2006/01/02 16:53:44 | 000,000,825 | ---- | C] () -- C:\WINDOWS\Solitaire.ini
[2005/12/31 16:28:59 | 000,003,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\BANTExt.sys
[2005/12/31 09:58:19 | 000,019,446 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2005/12/30 20:29:15 | 000,000,104 | RHS- | C] () -- C:\WINDOWS\System32\13F3352E2F.sys
[2005/12/30 20:29:14 | 000,004,184 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2005/12/29 14:56:56 | 000,000,082 | ---- | C] () -- C:\WINDOWS\MPLAYER.INI
[2005/12/26 15:38:13 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/12/26 15:31:00 | 000,149,504 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE
[2005/12/26 15:24:56 | 000,000,552 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005/12/26 15:23:19 | 000,060,564 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2005/12/26 15:00:02 | 000,049,152 | ---- | C] () -- C:\WINDOWS\setpwrcg.exe
[2005/12/26 14:59:44 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2005/12/26 14:59:42 | 000,000,392 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/05/19 19:05:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/08/10 15:12:05 | 000,000,780 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/10 15:07:31 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2004/08/10 15:02:15 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/08/10 14:57:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/08/10 14:57:15 | 000,250,288 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/10 14:51:22 | 000,088,064 | ---- | C] () -- C:\WINDOWS\System32\msn17289.dll
[2004/08/10 14:51:21 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/10 14:51:20 | 000,477,832 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/10 14:51:20 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/10 14:51:20 | 000,086,740 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/10 14:51:20 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/10 14:51:18 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/10 14:51:17 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/10 14:51:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/08/10 14:51:12 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/10 14:51:11 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/10 14:51:05 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/10 14:50:56 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[1996/12/09 01:00:00 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[1996/12/09 01:00:00 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL

========== LOP Check ==========

[2006/01/02 17:08:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\Bot Productions
[2005/12/29 18:48:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\Leadertech
[2007/04/01 13:56:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\MSNInstaller
[2006/01/21 16:55:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\MyFamily.com
[2010/09/24 19:18:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\NCH Swift Sound
[2005/12/31 09:51:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\Netscape
[2011/08/04 17:07:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\PriceGong
[2010/10/19 17:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kenneth\Application Data\Toolbar4
[2010/09/12 08:33:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/09/24 19:18:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2005/12/29 14:45:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Netscape Internet Service
[2010/12/11 20:08:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpeedBit
[2008/01/31 09:04:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SupportSoft
[2005/12/26 15:24:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/08/05 07:27:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\YAHOO
[2010/10/01 09:39:01 | 000,000,286 | ---- | M] () -- C:\WINDOWS\Tasks\wavepadShakeIcon.job

========== Purity Check ==========

< End of report >

Ken · 2011/08/09

Extras.txt
TL Extras logfile created on: 8/9/2011 9:47:11 AM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Kenneth\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

509.98 Mb Total Physical Memory | 154.39 Mb Available Physical Memory | 30.27% Memory free
1.22 Gb Paging File | 0.90 Gb Available in Paging File | 74.08% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 71.46 Gb Total Space | 47.02 Gb Free Space | 65.80% Space Free | Partition Type: NTFS

Computer Name: KGBNEW | User Name: Kenneth | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = SeaMonkeyHTML] -- C:\Program Files\SeaMonkey\seamonkey.exe (mozilla.org)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
https [open] -- C:\PROGRA~1\NETSCAPE\NETSCAPE\NETSCP.EXE -url "%1 "
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNetisabledxpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNetisabledxpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL
"C:\Program Files\America Online 9.0\waol.exe" = C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Yahoo!\Yahoo! Music Jukebox\YahooMusicEngine.exe" = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\YahooMusicEngine.exe:*:Enabled:Yahoo! Music Jukebox -- (Yahoo! Inc.)
"C:\Program Files\TurboTax\Deluxe 2007\32bit\ttax.exe" = C:\Program Files\TurboTax\Deluxe 2007\32bit\ttax.exe:LocalSubNet:Enabled:TurboTax -- (Intuit, Inc.)
"C:\Program Files\TurboTax\Deluxe 2007\32bit\updatemgr.exe" = C:\Program Files\TurboTax\Deluxe 2007\32bit\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager -- (Intuit, Inc.)
"C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe" = C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe:LocalSubNetisabled:Intuit Update Shared Downloads Server -- (Intuit Inc.)
"C:\WINDOWS\system32\fxsclnt.exe" = C:\WINDOWS\system32\fxsclnt.exe:*:Enabled:Microsoft Fax Console -- (Microsoft Corporation)
"C:\WINDOWS\system32\dlcdcoms.exe" = C:\WINDOWS\system32\dlcdcoms.exe:*:Enabledell 944 Server -- ( )

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03DF638A-D61C-4893-B8B9-845900C03163}" = TurboTax 2010 wnyiper
"{05BDC796-3451-4F81-B91D-E98F7ADA76C2}" = TurboTax 2010 WinPerTaxSupport
"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}" = Microsoft Plus! Photo Story 2 LE
"{105CFC7C-6992-11D5-BD9D-000102C10FD8}" = DjVu Browser Plug-in 3.5
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = Sonic DLA
"{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}" = Intel(R) PROSet for Wired Connections
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD LE
"{25EF00A1-F17B-11D6-88EA-000476CD2443}" = Verizon Online Support Center
"{25EF00BE-F17B-11D6-88EA-000476CD2443}" = Verizon Online
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 26
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{29521505-F489-4822-ADFA-32C6DEE4F114}" = TurboTax 2008 WinPerUserEducation
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{33BB4982-DC52-4886-A03B-F4C5C80BEE89}" = Windows Media Player 10
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3782EC09-4000-475E-8A59-9CABD6F03B4C}" = TurboTax 2010 WinPerFedFormset
"{3881DB80-EAA2-012B-ADAE-000000000000}" = TurboTax 2009 WinPerFedFormset
"{38975F50-EAA2-012B-ADB4-000000000000}" = TurboTax 2009 WinPerReleaseEngine
"{38A34630-EAA2-012B-ADB6-000000000000}" = TurboTax 2009 WinPerTaxSupport
"{3B8186F0-EAA2-012B-AE69-000000000000}" = TurboTax 2009 wnyiper
"{3C5A81D0-EAA2-012B-AE9F-000000000000}" = TurboTax 2009 wrapper
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Google AFE
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = Modem On Hold
"{4192EAC0-6B36-4723-B216-D0E86E7757AC}" = Jasc Paint Shop Photo Album 5
"{4F2FCCCF-29F3-44B9-886F-6D16F8417522}" = TurboTax 2010 wrapper
"{5905F42D-3F5F-4916-ADA6-94A3646AEE76}" = Dell Driver Reset Tool
"{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C}" = AOLIcon
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD 5.5
"{6D5FCA42-1486-4E32-AFE8-1B7E2AA59D33}" = Digital Content Portal
"{6E179C77-7335-458D-9537-4F4EAC0181ED}" = Photo Click
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}" = Microsoft Plus! Digital Media Edition Installer
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{74F7662C-B1DB-489E-A8AC-07A06B24978B}" = Dell System Restore
"{7570F1CA-016D-46AC-B586-CD74645EFB52}" = TurboTax 2008 WinPerFedFormset
"{76EFFC7C-17A6-479D-9E47-8E658C1695AE}" = Windows Backup Utility
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{78C496B9-5A6B-4692-8C2E-AFFFC34E4961}" = Jasc Paint Shop Pro Studio, Dell Editon
"{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}" = Modem Event Monitor
"{7DD9A065-2C86-4A9F-A5FF-796EC1B99DCA}" = AnswerWorks 4.0 Runtime - English
"{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}" = DellSupport
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{88214092-836F-4E22-A5AC-569AC9EE6A0F}" = TurboTax 2008 WinPerReleaseEngine
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8A9B8148-DDD7-448F-BD6C-358386D32354}" = Corel Photo Album 6
"{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}" = Sonic CinePlayer Decoder Pack
"{90AF0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E5A03E3-6246-4920-9630-0527D5DA9B07}" = AnswerWorks 5.0 English Runtime
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A525E00B-6609-442E-9DCD-64453C233E8D}" = TurboTax 2010 WinPerReleaseEngine
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9F6CFB0-806D-11E0-8EA1-B8AC6F97B88E}" = Google Earth Plug-in
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic Audio module
"{AC0EE5B0-A8FB-4D0A-AF03-2EDC518F841B}" = Roxio Media Experience
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.0)
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AF19F291-F22F-4798-9662-525305AE9E48}" = WordPerfect Office 12
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy
"{B1DB1AD8-C07E-4052-81A1-D2930232BA70}" = TurboTax 2008 wrapper
"{B23726CF-68BF-41A6-A4EB-72F12F87FE05}" = TurboTax 2008 WinPerTaxSupport
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3DE07CB-036F-45BC-85BD-D6FFC5D33603}" = TurboTax 2008 wnyiper
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E6D9BC25-0DBC-4368-8E4A-7DEE80661CD9}" = TurboTax 2008 WinPerProgramHelp
"{EC3B8CA2-49B8-4D38-BE9C-ABD0F6029168}" = Yahoo! Music Jukebox
"{F2F4C144-7D1A-47C4-9D53-395A57B0CD64}" = Family Tree Maker 2006
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast" = avast! Free Antivirus
"Belarc Advisor 2.0" = Belarc Advisor 7.0
"CodeStuff Starter" = CodeStuff Starter
"conduitEngine" = Conduit Engine
"Dell Digital Jukebox Driver" = Dell Digital Jukebox Driver
"Dell Photo AIO Printer 944" = Dell Photo AIO Printer 944
"ESET Online Scanner" = ESET Online Scanner v3
"Excel" = Microsoft Excel 97
"FTP Explorer" = FTP Explorer
"FTW" = Family Tree Maker
"iCare Data Recovery_is1" = iCare Data Recovery 4.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"Intel(R) 537EP V9x DF PCI Modem" = Intel(R) 537EP V9x DF PCI Modem
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.1.1800
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 5.0.1 (x86 en-US)" = Mozilla Firefox 5.0.1 (x86 en-US)
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PROSet" = Intel(R) PRO Network Adapters and Drivers
"QuickTime" = QuickTime
"RealPlayer 12.0" = RealPlayer
"RegVac Registry Cleaner (Trial Version)_is1" = RegVac Registry Cleaner 5.01 (Trial Version)
"SeaMonkey (2.2)" = SeaMonkey (2.2)
"Softonic-Eng7 Toolbar" = Softonic-Eng7 Toolbar
"SpeedBit Video Downloader" = SpeedBit Video Downloader
"StreetPlugin" = Learn2 Player (Uninstall Only)
"TurboTax 2008" = TurboTax 2008
"TurboTax 2009" = TurboTax 2009
"TurboTax 2010" = TurboTax 2010
"TurboTax Deluxe 2007" = TurboTax Deluxe 2007
"Verizon SmartCall" = Verizon SmartCall
"ViewpointMediaPlayer" = Viewpoint Media Player
"WavePad" = WavePad Sound Editor
"WildTangent CDA" = WildTangent Web Driver
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3
"Word8.0" = Microsoft Word 97

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 8/6/2011 7:25:02 PM | Computer Name = KGBNEW | Source = Application Hang | ID = 1002
Description = Hanging application seamonkey.exe, version 5.0.0.4204, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 8/7/2011 1:20:03 PM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application javara.exe, version 1.16.1.1763, faulting module
ntdll.dll, version 5.1.2600.6055, fault address 0x0000100b.

Error - 8/7/2011 1:33:22 PM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application jusched.exe, version 2.0.5.1, faulting module
user32.dll, version 5.1.2600.5512, fault address 0x000187f1.

Error - 8/7/2011 2:31:44 PM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application jusched.exe, version 2.0.5.1, faulting module
user32.dll, version 5.1.2600.5512, fault address 0x000187f1.

Error - 8/7/2011 2:45:18 PM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application jusched.exe, version 2.0.5.1, faulting module
user32.dll, version 5.1.2600.5512, fault address 0x000187f1.

Error - 8/7/2011 8:58:21 PM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application jusched.exe, version 2.0.5.1, faulting module
user32.dll, version 5.1.2600.5512, fault address 0x000187f1.

Error - 8/8/2011 10:58:05 AM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application jusched.exe, version 2.0.5.1, faulting module
user32.dll, version 5.1.2600.5512, fault address 0x000187f1.

Error - 8/9/2011 7:58:02 AM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application jusched.exe, version 2.0.5.1, faulting module
user32.dll, version 5.1.2600.5512, fault address 0x000187f1.

Error - 8/9/2011 8:22:36 AM | Computer Name = KGBNEW | Source = Application Error | ID = 1000
Description = Faulting application jusched.exe, version 2.0.5.1, faulting module
user32.dll, version 5.1.2600.5512, fault address 0x000187f1.

Error - 8/9/2011 9:40:32 AM | Computer Name = KGBNEW | Source = Userenv | ID = 1512
Description = Windows cannot unload your registry file. The memory used by the registry
has not been freed. This is often caused by services running as a user account,
try configuring the services to run in either the LocalService or NetworkService
account. If this problem persists, contact your administrator. DETAIL - Insufficient
system resources exist to complete the requested service.

[ System Events ]
Error - 8/9/2011 8:37:12 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 8/9/2011 8:37:12 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 8/9/2011 8:37:13 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 8/9/2011 8:37:13 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 8/9/2011 9:19:19 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Intuit Update Service
service to connect.

Error - 8/9/2011 9:19:19 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7000
Description = The Intuit Update Service service failed to start due to the following
error: %%1053

Error - 8/9/2011 9:19:19 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Roxio Upnp Server 9 service
to connect.

Error - 8/9/2011 9:19:19 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Fax service to connect.

Error - 8/9/2011 9:19:19 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7000
Description = The Fax service failed to start due to the following error: %%1053

Error - 8/9/2011 9:46:01 AM | Computer Name = KGBNEW | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Roxio Upnp Server 9 service
to connect.

< End of report >

Ken · 2011/08/09

Did not remove tools yet. Just in case.
Installed IE8 and it hasn't crashed.
Did a registry clean.
Ran defrag. It took over 4 hours; it never took over an hour before.
Startup time to the welcome screen is down from 2 min to 1½ min. It used to be 10 - 15 sec.
Desktop comes right up, but the CPU is still spending up to 95% of the time on hardware interrupts for 5 min.

broni · 2011/08/09

Did a registry clean.
Click to expand...

Never ever do this. Surely I didn't ask you to do it.
Registry cleaners/optimizers are not recommended for several reasons:

Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.

Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry ". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a program to work.

Not all registry cleaners create a backup of the registry before making changes. If the changes prevent the system from booting up, then there is no backup available to restore it in order to regain functionality. A backup of the registry is essential BEFORE making any changes to the registry.

Improperly removing registry entries can hamper malware disinfection and make the removal process more difficult if your computer becomes infected. For example, removing malware related registry entries before the infection is properly identified can contribute to system instability and even make the malware undetectable to removal tools.

The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results ".

Unless you have a particular problem that requires a registry edit to correct it, I would suggest you leave the registry alone. Using registry cleaning tools unnecessarily or incorrectly could lead to disastrous effects on your operating system such as preventing it from ever starting again. For routine use, the benefits to your computer are negligible while the potential risks are great.

Ed Bott's Webog: Why I don't use registry cleaners

Do I need a Registry Cleaner?

===================================================

Reset restore points manually.
Turn system restore off.
Restart computer.
Turn system restore on.

===================================================

Run OTL "Cleanup ".
If it doesn't work delete all tools manually.

====================================================

CPU is still spending up to 95% of the time on hardware interrupts for 5 min.
Click to expand...

That may be a sign of falling hard drive.

Check Primary and Secondary IDE settings: Device Manager -> IDE ATA/ATAPI controllers -> Primary or Secondary IDE Channel -> Properties -> Advanced Settings. Look at the Current Transfer Mode field.
See, if it's in PIO mode instead of DMA mode.

I'd also....

Run hard drive diagnostics: http://www.tacktech.com/display.cfm?ttid=287 (or http://www.bleepingcomputer.com/forums/index.php?showtopic=28744&hl=hard+drive+diagnostic)
Make sure, you select tool, which is appropriate for the brand of your hard drive.
Depending on the program, it'll create bootable floppy, or bootable CD.
If downloaded file is of .iso type, use ImgBurn: http://www.imgburn.com/ to burn .iso file to a CD (select "Write image file to disc" option), to make the CD bootable.
For Toshiba hard drives, see here: http://sdd.toshiba.com/main.aspx?Pa...rivesUSandCanada/SoftwareUtilities#diagnostic

Note : If you do not know how to set your computer to boot from CD follow the steps HERE

Ken · 2011/08/10

System Restore cleared and back on.
Cleaning tools removed.
Transfer Mode set to DMA if available. Current setting was PIO.

broni · 2011/08/10

Current setting was PIO.
Click to expand...

That was the reason for "hardware interrupts" going crazy.

How is CPU usage now?

Did you run hard drive diagnostic?

Ken · 2011/08/11

"broni said: ↑

That was the reason for "hardware interrupts" going crazy.
The first box only allows the choice of DMA if available or PIO. It was set to DMA if available and I didn't change anything.
The second box displays the current setting which was PIO and nothing to change.

How is CPU usage now?
It churns as before.
Yesterday the CD drive locked up so I could not eject a CD of photos. I had to pull the drive power plug to recover.
Today, soon after start, Windows did a memory dump.

Did you run hard drive diagnostic?
Click to expand...

I went as far as downloading the iso file. I didn't have the time to devote to finishing and I didn't want to install any software until I had a couple of good system restore points.
What is a good utility to copy the C drive onto an external drive for use in changing the hard drive?

.The quote is messed up, but you should be able to find my responses.

broni · 2011/08/11

Make sure you completed all steps from my reply #39.

As for imaging a hard drive...

Acronis True Image: http://www.acronis.com/ - not free, but the best

Free alternatives:
- Macrium Reflect: http://www.macrium.com/ReflectFree.asp
- DriveImage XML: http://www.runtime.org/driveimage-xml.htm (tutorial: http://www.bleepingcomputer.com/tutorials/tutorial160.html)
- SelfImage: http://www.excelcia.org/modules.php?name=News&file=article&sid=21
- Paragon Drive Backup: http://www.paragon-software.com/home/db-express/

Ken · 2011/08/12

I did #39.
Ran PSI and it patched a number of things.
Next I am replacing the wounded hard drive.
Last time I did this was on a Win95 machine with 2 internal drives. It was quick and easy with Partition Magic.
Will Acronis save the image to my external drive where I have a partition reserved for this purpose?
Does Acronis specifically address drive replacement?

broni · 2011/08/12

Yes and yes.

All kind of manuals: http://www.google.com/search?source...6l0l10042l18l18l0l1l1l0l542l3493l1.8.7.5-1l17

Ken · 2011/08/22

I tried to load a new blank drive, from the Acronis image backup on my external drive, using the bootable CD. When I get to the Recovery mode, it can't find my backup. Any Ideas?
I started a new thread, but not much has happened.
http://www.windowsbbs.com/other-pc-...e-replacement-acronis-problem.html#post569882

broni · 2011/08/22

You posted in correct forum. Someone will get there. Be patient.

Ken · 2011/08/24

New drive is in and all is well.
Thank you for all your help in cleaning up the mess.
Lesson learned: when daughter and grand daughter visit and want to use the computer, make sure their hands are tied behind their backs.

broni · 2011/08/24

Hahaha...

God luck!

Log in or Sign up

Solved Internet Explorer Crashes

Ken Well-Known Member Thread Starter

Ken Well-Known Member Thread Starter

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Share This Page

Log in or Sign up

Solved Internet Explorer Crashes

Ken Well-Known Member Thread Starter

Ken Well-Known Member Thread Starter

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Ken Well-Known Member Thread Starter

broni Moderator Malware Analyst

Share This Page

Useful Searches