Advertisement
Advertisement
 Search | |
| |
03-Jul-2012, 03:14 PM
#2 | |||||||
| Hiya and welcome to Tech Support Guy  Download Security Check from here.
Please download Malwarebytes' Anti-Malware from Here Double Click mbam-setup.exe to install the application.
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediatly. Download and scan with SUPERAntiSpyware Free Edition for Home Users
Please include the MBAM log and, SUPERAntiSpyware Scan Log, checkup.txt and a fresh HijackThis log in your next reply eddie
__________________ Just go with the flow, like a twig on the shoulders of a mighty stream MVP in Consumer Security |
05-Jul-2012, 05:28 PM
#4 | |||||||
| Yep, the logs are all correct -------- Uninstall these programs because they're not needed or are outdated or are dangerous to use. If any can't be installed, let me know, but carry on with the rest of the uninstall and the programs below. We can look at any that couldn't be uninstalled later Optimizers, boosters, cleaners, etc. are basically useless and a waste of money and can do more harm than good Reading these links might also put you off such progs: http://miekiemoes.blogspot.com/2008/...eaking_13.html http://www.edbott.com/weblog/?p=643 TweakNow RegCleaner 2011 AML Free Registry Cleaner 4.20 SlimCleaner ----------- Your Java is out of date, so lets do that next: Upgrade Java : (32 bits)
After doing the above, for the remains of the Java, can you do this: Open Java in the Control Panel and under the General tab, under Temporary Internet Files, click the Settings button. Then click on Delete Files. Make sure both of these options are checked:
----------------- You also have two versions of Adobe Reader: Adobe Reader 8 Adobe Reader X (10.1.3) Uninstall Adobe Reader 8, as this is the older version, and won't be patched fully, which can leave you open to any malicious files out there. ----------------- Can you run the following tools, and copy/paste the logs that they produce here. If its over a few posts, that's fine Download the latest version of TDSSKiller from here and save it to your Desktop.
A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply -------------------------- Download aswMBR.exe ( 511KB ) to your desktop. Double click the aswMBR.exe to run it Click the "Scan" button to start scan  On completion of the scan click save log, save it to your desktop and post in your next reply  ------------------------- Delete any copies of Combofix that you have. Download ComboFix from one of these locations: Link 1 Link 2 * IMPORTANT !!! As you download it rename it to username123.exe and save it to your Desktop
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.  Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:  Click on Yes, to continue scanning for malware. When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply. eddie
__________________ Just go with the flow, like a twig on the shoulders of a mighty stream MVP in Consumer Security |
10-Jul-2012, 02:41 PM
#10 | ||||||
| OTL logfile created on: 10/07/2012 18:55:16 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = C:\Users\currys\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19222) Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy 3.00 Gb Total Physical Memory | 1.97 Gb Available Physical Memory | 65.67% Memory free 6.22 Gb Paging File | 4.54 Gb Available in Paging File | 72.96% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 586.17 Gb Total Space | 420.59 Gb Free Space | 71.75% Space Free | Partition Type: NTFS Computer Name: EAMONNS | User Name: currys | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012/07/10 18:50:53 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\currys\Downloads\OTL.exe PRC - [2012/06/26 18:33:03 | 003,906,432 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe PRC - [2012/05/07 01:27:06 | 000,932,736 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.0.2\ToolbarUpdater.exe PRC - [2012/05/03 15:10:02 | 002,446,872 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe PRC - [2012/05/03 15:07:06 | 000,073,360 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe PRC - [2012/04/30 20:05:22 | 000,497,280 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe PRC - [2012/04/30 20:04:28 | 000,738,944 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012/04/04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2012/02/29 21:58:46 | 000,857,408 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe PRC - [2012/02/29 21:58:36 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe PRC - [2012/01/03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011/09/30 19:04:54 | 000,142,848 | ---- | M] () -- C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe PRC - [2011/08/26 13:56:04 | 000,685,912 | ---- | M] (IObit) -- C:\Program Files\IObit\Game Booster\gbtray.exe PRC - [2011/08/12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2008/07/07 16:26:28 | 001,038,136 | ---- | M] (Packard Bell BV) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe PRC - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ========== Modules (No Company Name) ========== MOD - [2012/07/10 18:36:21 | 000,052,736 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll MOD - [2012/07/10 18:36:20 | 000,065,024 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll MOD - [2012/07/04 11:19:20 | 000,117,760 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL MOD - [2012/07/04 11:19:20 | 000,052,224 | ---- | M] () -- C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll MOD - [2011/09/30 19:04:54 | 000,142,848 | ---- | M] () -- C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe MOD - [2011/08/26 13:56:08 | 000,516,440 | ---- | M] () -- C:\Program Files\IObit\Game Booster\sqlite3.dll MOD - [2011/02/22 16:01:26 | 000,345,088 | ---- | M] () -- C:\Program Files\IObit\Game Booster\madexcept_.bpl MOD - [2011/02/22 16:01:26 | 000,177,152 | ---- | M] () -- C:\Program Files\IObit\Game Booster\madbasic_.bpl MOD - [2011/02/22 16:01:26 | 000,044,544 | ---- | M] () -- C:\Program Files\IObit\Game Booster\maddisAsm_.bpl ========== Win32 Services (SafeList) ========== SRV - File not found [Auto | Stopped] -- -- (WMService) SRV - File not found [Disabled | Stopped] -- C:\Program Files\Spybot -- (SBSDWSCService) SRV - File not found [Auto | Stopped] -- -- (PLFlash DeviceIoControl Service) SRV - File not found [On_Demand | Stopped] -- -- (odserv) SRV - File not found [On_Demand | Stopped] -- -- (NMIndexingService) SRV - File not found [Auto | Stopped] -- -- (Nero BackItUp Scheduler 3) SRV - File not found [On_Demand | Stopped] -- -- (iPod Service) SRV - File not found [Auto | Stopped] -- -- (IBUpdaterService) SRV - File not found [Auto | Stopped] -- -- (Apple Mobile Device) SRV - [2012/06/23 13:46:11 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/05/16 23:09:21 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/05/10 11:03:17 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012/05/10 09:55:44 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2012/05/10 09:55:42 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2012/05/07 01:27:06 | 000,932,736 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.0.2\ToolbarUpdater.exe -- (vToolbarUpdater11.0.2) SRV - [2012/05/03 15:10:02 | 002,446,872 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon) SRV - [2012/04/30 20:05:22 | 000,497,280 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe -- (IswSvc) SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012/03/26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc) SRV - [2012/03/01 00:59:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012/01/03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011/08/12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE) SRV - [2010/12/10 13:47:24 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files\Citrix\GoToAssist\570\g2aservice.exe -- (GoToAssist) SRV - [2009/04/11 07:28:25 | 000,375,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc) SRV - [2009/01/02 13:05:42 | 003,098,152 | ---- | M] (Kontiki Inc.) [Auto | Stopped] -- C:\Program Files\Kontiki\KService.exe -- (KService) SRV - [2008/08/21 22:08:35 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2008/07/16 15:00:00 | 000,024,576 | ---- | M] () [Auto | Stopped] -- C:\Program Files\PACKARDBELL\Packard Bell Recovery Management\Service\ETService.exe -- (ETService) SRV - [2008/02/03 12:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\System32\ezsvc7.dll -- (ezSharedSvc) SRV - [2008/01/21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- -- (vsdatant7) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (MRENDIS5) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (MREMPR5) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (IpInIp) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (cpuz134) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\currys\AppData\Local\Temp\catchme.sys -- (catchme) DRV - [2012/06/23 12:42:47 | 000,024,416 | ---- | M] (Greatis Software) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\regguard.sys -- (RegGuard) DRV - [2012/06/23 11:35:37 | 000,035,816 | ---- | M] (Greatis Software) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\Partizan.sys -- (Partizan) DRV - [2012/05/10 09:55:44 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2012/05/10 09:55:44 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2012/04/30 20:05:40 | 000,027,016 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL) DRV - [2012/04/04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2012/03/01 00:59:00 | 010,819,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2012/01/17 13:45:56 | 000,148,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2012/01/09 19:59:32 | 000,468,272 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF) DRV - [2012/01/09 19:59:30 | 000,133,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (KL1) DRV - [2012/01/09 19:59:30 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kl2.sys -- (kl2) DRV - [2011/12/09 13:40:53 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr) DRV - [2011/07/22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV) DRV - [2011/07/12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2011/05/26 16:03:56 | 000,021,248 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MREMP50.sys -- (MREMP50) DRV - [2011/05/26 16:03:50 | 000,020,096 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MRESP50.sys -- (MRESP50) DRV - [2011/05/07 18:51:26 | 000,451,160 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\Windows\System32\drivers\vsdatant.sys -- (Vsdatant) DRV - [2011/02/23 17:52:34 | 000,016,184 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver) DRV - [2010/10/25 19:04:46 | 000,303,720 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2010/06/17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2010/04/09 03:32:36 | 000,215,656 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32) DRV - [2008/07/16 14:56:06 | 000,015,392 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\int15.sys -- (int15) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\URLSearchHook: {91da5e8a-3318-4f8c-b67e-5964de3ab546} - No CLSID value found IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://www.goonsearch.com/web.html?source=IBR-IB-PDP-INS-DBS&q={searchTerms} IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer: source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW IE - HKLM\..\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}: "URL" = http://www.searchqu.com/web?src=ieb&systemid=406&q={searchTerms} IE - HKLM\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2645238 IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS} IE - HKU\S-1-5-20\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE9ENUS/110 IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?ocid=EIE9HP&PC=UP50 IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 8C 08 D2 6F 60 88 CC 01 [binary data] IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=101067&mntrId=50b4fa92000000000000002197a1 3750 IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{12E234A8-7EC3-47EF-9DD4-E79D0259DB1B}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer: source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_en IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ALSV5&o=1665&src=crm&q={searchTerms}&locale=en_UK&apn _ptnrs=AU&apn_dtid=YYYYYYYYGB&apn_uid=34399D31-44A3-4DA6-8AC7-C989A030269F&apn_sauid=A32CCD2B-3BB2-4310-B8FA-574A397D7115 IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{2310B25F-E44D-4DCE-8978-173DBD1341C1}: "URL" = http://search.avg.com/route/?d=$instd$&v=$ver$&i=$dchid$&tp=chrome&q={searchTerms}&lng={moz:locale}&iy= &ychte=uk IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://www.goonsearch.com/web.html?source=IBR-IB-PDP-INS-DBS&q={searchTerms} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.bing.com/search?FORM=UP50DF&PC=UP50&q={searchTerms}&src=IE-SearchBox IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = http://127.0.0.1:4664/search&s=CrQt__Hz-oJhPpnLvuNAmY8Q990?q={searchTerms} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}: "URL" = http://www.searchqu.com/web?src=ieb&systemid=406&q={searchTerms} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}: "URL" = http://search.ibryte.com/i/playbryte/search/redirect/?type=default-ie&user_id=8a29f83a-1762-4abe-b6d2-85b8f55d9ff9&query={searchTerms} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={2AB81444-0133-4A21-88D6-7236293CD844}&mid=86c7969f8ba047d19024d168d145dea3-9a877b0da52b245d0ae7330e6e4e92d782696eee&lang=en&ds=ts025&pr=&d=2011-12-14 00:04:00&v=8.0.0.34&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{98C169E2-613B-42D8-9716-3201888DF14E}: "URL" = http://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=380920&p={searchTerms} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS} IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "MyStart Search" FF - prefs.js..browser.search.defaultthis.engineName: "WiseConvert Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "WiseConvert Customized Web Search" FF - prefs.js..browser.startup.homepage: "http://www.google.co.uk/" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=2&q=" FF - prefs.js..network.proxy.no_proxies_on: "*.local" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: File not found FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.0.2\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll File not found FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Motive.com/NpMotive,version=1.0: C:\Program Files\Common Files\Motive\npMotive.dll (Motive, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.609: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.609: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5 videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.609: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\currys\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\currys\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp .com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/01/10 10:44:51 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/01/03 12:29:42 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker [2012/05/23 18:09:14 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.0.0.9\ [2012/07/01 01:10:38 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/07 12:47:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/07/05 23:19:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 2.0.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/07 12:47:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 2.0.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/07/05 23:19:40 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp. com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/01/10 10:44:51 | 000,000,000 | ---D | M] [2012/01/22 11:08:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\currys\AppData\Roaming\mozilla\Extensions [2009/07/24 22:05:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\currys\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org [2012/01/22 11:56:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\currys\AppData\Roaming\mozilla\Firefox\extensions [2012/07/01 01:10:55 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\currys\AppData\Roaming\mozilla\Firefox\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2012/07/08 19:39:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\currys\AppData\Roaming\mozilla\Firefox\Profiles\fwvafgml.default\e xtensions [2012/07/08 19:39:06 | 000,000,000 | ---D | M] (WiseConvert Community Toolbar) -- C:\Users\currys\AppData\Roaming\mozilla\Firefox\Profiles\fwvafgml.default\e xtensions\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} [2012/06/27 14:38:40 | 000,000,925 | ---- | M] () -- C:\Users\currys\AppData\Roaming\Mozilla\Firefox\Profiles\fwvafgml.default\s earchplugins\conduit.xml [2012/06/23 14:03:40 | 000,002,203 | ---- | M] () -- C:\Users\currys\AppData\Roaming\Mozilla\Firefox\Profiles\fwvafgml.default\s earchplugins\MyStart Search.xml [2012/06/13 23:13:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012/07/07 12:47:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions [2012/05/21 22:59:26 | 001,184,804 | ---- | M] () (No name found) -- C:\USERS\CURRYS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\FWVAFGML.DEFAULT\E XTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI [2012/07/07 12:47:33 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012/06/29 17:07:04 | 000,003,703 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml [2012/06/23 13:40:53 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012/06/23 13:40:53 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml ========== Chrome ========== CHR - Extension: No name found = C:\Users\currys\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmcccagmbagkpbdgpammblejlmiempb\ CHR - Extension: No name found = C:\Users\currys\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.3_0\ CHR - Extension: No name found = C:\Users\currys\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpihmmhdcobmllpcnpfbhnipmhamldje\2.0_0\ O1 HOSTS File: ([2012/07/06 12:16:18 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Zonealarm Helper Object) - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files\Check Point Software Technologies LTD\zonealarm\1.5.23.8\bh\zonealarm.dll (Montera Technologeis LTD) O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O2 - BHO: (no name) - {a0e8bc7d-6959-40b6-8e05-204d9768ad6e} - No CLSID value found. O3 - HKLM\..\Toolbar: (ZoneAlarm Security Toolbar) - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files\Check Point Software Technologies LTD\zonealarm\1.5.23.8\zonealarmTlbr.dll (Montera Technologeis LTD) O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O4 - HKLM..\Run: [4oD] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.) O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies) O4 - HKLM..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [ZoneAlarm] C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD) O4 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.) O4 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV) O4 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O4 - Startup: C:\Users\currys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BBC iPlayer Desktop.lnk = C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 253 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun- = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun- = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun- = 0 O7 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun- = 0 O7 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 253 O7 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Download with &Media Finder - Reg Error: Value error. File not found O8 - Extra context menu item: E&xport to Microsoft Excel - Reg Error: Value error. File not found O8 - Extra context menu item: Google Sidewiki... - Reg Error: Value error. File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O15 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..Trusted Domains: localhost ([]http in Local intranet) O15 - HKU\S-1-5-21-118059262-2797764304-1290977041-1000\..Trusted Ranges: Range1 ([http] in Local intranet) O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} http://assets.photobox.com/assets/au...20090910103721 (Reg Error: Key error.) O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/Driver...reqlab_nvd.cab (Reg Error: Key error.) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/s...irector/sw.cab (Reg Error: Key error.) O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} http://catalog.update.microsoft.com/...?1322783446664 (MUCatalogWebControl Class) O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn...Detection2.cab (GMNRev Class) O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/Driver...aSmartScan.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jin...ndows-i586.cab (Java Plug-in 10.5.0) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get.../ultrashim.cab (Reg Error: Key error.) O16 - DPF: {BEA7310D-06C4-4339-A784-DC3804819809} http://www.tescophoto.com/upload/act...eX_Control.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jin...ndows-i586.cab (Java Plug-in 1.7.0_05) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.7.0_05) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27FA60FB-5855-47ED-90FC-73C7DFD953D2}: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\avgsecuritytoolbar - No CLSID value found O18 - Protocol\Handler\base64 - No CLSID value found O18 - Protocol\Handler\chrome - No CLSID value found O18 - Protocol\Handler\ms-itss - No CLSID value found O18 - Protocol\Handler\prox - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.0.2\ViProtocol.dll () O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com) O20 - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files\Citrix\GoToAssist\570\G2AWinLogon.dll) - C:\Program Files\Citrix\GoToAssist\570\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img6.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img6.jpg O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\System32\ezUPBHook.dll (EasyBits Software Corp.) O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011/12/29 12:14:24 | 000,000,000 | ---D | M] - C:\Autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found NetSvcs: ezSharedSvc - C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS) ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353) ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {1897C549-AE52-4571-8996-44854F5612B2} - Microsoft .NET Framework 1.1 Security Update (KB2656370) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - Reg Error: Value error. ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\Microsoft ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 10.3 ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 10.3 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {3CE02F38-C912-44CF-B02E-60F7964E61FF} - BingPack ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\Microsoft ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - DOTNETFRAMEWORKS ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{184906ff-ed62-4ee5-bd9c-fd55a3fb7b2d} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{44ca04c9-b479-4ac6-9f6d-2161ab55aa7c} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP MsConfig - StartUpFolder: C:^Users^currys^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BBC iPlayer Desktop.lnk - C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe - () MsConfig - StartUpReg: AppleSyncNotifier - hkey= - key= - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.) MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) MsConfig - StartUpReg: TkBellExe - hkey= - key= - C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) MsConfig - State: "bootini" - 2 MsConfig - State: "services" - 2 MsConfig - State: "startup" - 2 CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2012/07/06 18:53:42 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4 [2012/07/06 16:38:06 | 000,000,000 | ---D | C] -- C:\Users\currys\Desktop\checkoutPaypalComplete.asp_files [2012/07/06 12:40:40 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2012/07/06 11:58:54 | 000,000,000 | ---D | C] -- C:\Config.Msi [2012/07/06 10:41:36 | 002,135,640 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\currys\Desktop\tdsskiller(4).exe [2012/07/05 23:20:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2012/07/05 00:19:45 | 000,000,000 | ---D | C] -- C:\Users\currys\Desktop\OpenOffice.org 3.4 (en-US) Installation Files [2012/07/04 16:44:55 | 000,000,000 | ---D | C] -- C:\Users\currys\Desktop\New Folder [2012/07/04 11:19:08 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\SUPERAntiSpyware.com [2012/07/04 11:19:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2012/07/04 11:18:56 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2012/07/04 11:18:56 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2012/07/04 10:42:09 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis [2012/07/04 10:42:08 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2012/07/04 00:33:11 | 000,000,000 | ---D | C] -- C:\Users\currys\Documents\1059343-internet-options-control-panel-missing_files [2012/07/02 18:56:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012/07/02 18:56:43 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012/06/30 16:03:16 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\Sammsoft [2012/06/30 16:02:56 | 000,000,000 | ---D | C] -- C:\Program Files\ARO 2012 [2012/06/30 11:59:49 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012/06/30 11:56:04 | 000,000,000 | ---D | C] -- C:\Users\currys\Desktop\RK_Quarantine [2012/06/29 23:55:11 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\DigitalSupport [2012/06/29 23:33:07 | 000,000,000 | ---D | C] -- C:\Users\currys\Documents\Simply Super Software [2012/06/29 23:33:07 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\Simply Super Software [2012/06/29 23:32:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Simply Super Software [2012/06/29 23:32:57 | 000,000,000 | ---D | C] -- C:\Program Files\Trojan Remover [2012/06/28 13:40:23 | 000,000,000 | ---D | C] -- C:\Program Files\ReImageCompanion [2012/06/28 13:34:28 | 000,000,000 | -H-D | C] -- C:\ProgramData\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46} [2012/06/28 13:31:38 | 000,000,000 | -H-D | C] -- C:\ProgramData\~0 [2012/06/25 00:35:19 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer [2012/06/25 00:20:23 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client [2012/06/24 11:12:28 | 000,000,000 | ---D | C] -- C:\Program Files\RegZooka [2012/06/23 13:46:38 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Local\Macromedia [2012/06/23 11:43:58 | 000,024,416 | ---- | C] (Greatis Software) -- C:\Windows\System32\drivers\regguard.sys [2012/06/23 11:35:37 | 000,039,184 | ---- | C] (Greatis Software) -- C:\Windows\System32\Partizan.exe [2012/06/23 11:35:37 | 000,035,816 | ---- | C] (Greatis Software) -- C:\Windows\System32\drivers\Partizan.sys [2012/06/23 11:26:49 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2012/06/23 10:45:42 | 000,000,000 | ---D | C] -- C:\ProgramData\RegRun [2012/06/23 10:45:04 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\RegRunInfo [2012/06/23 10:44:11 | 000,000,000 | ---D | C] -- C:\Users\currys\Documents\RegRun2 [2012/06/23 10:44:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reanimator [2012/06/23 10:44:08 | 000,000,000 | ---D | C] -- C:\Program Files\Greatis [2012/06/20 00:21:52 | 000,000,000 | ---D | C] -- C:\f90e4393fac73d563b0e [2012/06/19 22:53:12 | 000,342,168 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctDS.sys [2012/06/19 22:53:07 | 000,203,088 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTSD.sys [2012/06/19 22:53:07 | 000,000,000 | ---D | C] -- C:\Program Files\PC Tools [2012/06/19 22:53:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools [2012/06/19 22:52:48 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools [2012/06/19 22:52:47 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\TestApp [2012/06/18 23:34:17 | 000,000,000 | ---D | C] -- C:\Program Files\FlashGet Network [2012/06/18 23:34:17 | 000,000,000 | ---D | C] -- C:\Users\currys\AppData\Roaming\FlashGet [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012/07/10 19:00:04 | 000,000,342 | ---- | M] () -- C:\Windows\tasks\Recovery DVD Creator-currys.job [2012/07/10 18:53:05 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/07/10 18:51:08 | 000,000,394 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{A65AEF0B-B822-4C24-B3BE-67EE9605EB86}.job [2012/07/10 18:38:56 | 000,668,012 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012/07/10 18:38:56 | 000,136,484 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012/07/10 18:36:10 | 000,000,900 | ---- | M] () -- C:\Users\currys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BBC iPlayer Desktop.lnk [2012/07/10 18:35:43 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/07/10 18:34:07 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml [2012/07/10 18:33:51 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/07/10 18:33:48 | 000,000,860 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-118059262-2797764304-1290977041-1000Core.job [2012/07/10 18:33:44 | 000,003,344 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012/07/10 18:33:44 | 000,003,344 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012/07/10 18:33:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/07/08 23:49:44 | 000,004,857 | ---- | M] () -- C:\Users\currys\Documents\Reply to thread 'Internet Options in Control Panel missing'.eml [2012/07/08 19:40:57 | 001,558,016 | ---- | M] () -- C:\Users\currys\Desktop\RogueKiller(1).exe [2012/07/06 18:57:15 | 000,322,288 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012/07/06 16:38:07 | 000,048,211 | ---- | M] () -- C:\Users\currys\Desktop\checkoutPaypalComplete.asp.htm [2012/07/06 14:26:27 | 000,022,477 | ---- | M] () -- C:\Users\currys\Desktop\Argos - Thank you for your order number 201549843.eml [2012/07/06 13:47:29 | 000,002,560 | ---- | M] () -- C:\Windows\_MSRSTRT.EXE [2012/07/06 12:16:18 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2012/07/06 12:00:10 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif [2012/07/06 11:46:44 | 000,000,890 | ---- | M] () -- C:\Users\currys\Desktop\baffledUK123.exe - Shortcut.lnk [2012/07/06 10:41:40 | 002,135,640 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\currys\Desktop\tdsskiller(4).exe [2012/07/06 00:46:13 | 000,002,525 | ---- | M] () -- C:\Users\currys\Desktop\HiJackThis.lnk [2012/07/05 23:31:17 | 000,001,359 | ---- | M] () -- C:\Users\currys\Desktop\java - Shortcut.lnk [2012/07/05 00:18:14 | 000,016,968 | ---- | M] () -- C:\Users\currys\Untitled 1.odt [2012/07/04 11:19:01 | 000,001,802 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2012/07/04 00:33:12 | 000,064,364 | ---- | M] () -- C:\Users\currys\Documents\1059343-internet-options-control-panel-missing.html [2012/07/02 23:38:28 | 000,002,605 | ---- | M] () -- C:\Users\Public\Desktop\Advanced Disk Cleaner.lnk [2012/07/02 18:56:52 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/07/01 00:05:13 | 3220,320,256 | -HS- | M] () -- C:\hiberfil.sys [2012/06/28 13:31:39 | 000,001,583 | ---- | M] () -- C:\Users\currys\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk [2012/06/26 23:39:39 | 000,000,134 | ---- | M] () -- C:\Users\currys\Desktop\Microsoft Fix it.url [2012/06/24 11:02:03 | 000,000,487 | ---- | M] () -- C:\Windows\wininit.ini [2012/06/23 12:42:47 | 000,024,416 | ---- | M] (Greatis Software) -- C:\Windows\System32\drivers\regguard.sys [2012/06/23 11:35:37 | 000,039,184 | ---- | M] (Greatis Software) -- C:\Windows\System32\Partizan.exe [2012/06/23 11:35:37 | 000,035,816 | ---- | M] (Greatis Software) -- C:\Windows\System32\drivers\Partizan.sys [2012/06/23 10:44:14 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2012/06/23 10:44:14 | 000,001,688 | ---- | M] () -- C:\Windows\System32\autoexec.nt [2012/06/23 10:44:14 | 000,000,002 | RHS- | M] () -- C:\Windows\winstart.bat [2012/06/23 10:44:11 | 000,000,876 | ---- | M] () -- C:\Users\currys\Desktop\Reanimator.lnk [4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2012/07/08 23:49:43 | 000,004,857 | ---- | C] () -- C:\Users\currys\Documents\Reply to thread 'Internet Options in Control Panel missing'.eml [2012/07/08 19:40:56 | 001,558,016 | ---- | C] () -- C:\Users\currys\Desktop\RogueKiller(1).exe [2012/07/08 00:57:14 | 000,000,394 | -H-- | C] () -- C:\Windows\tasks\User_Feed_Synchronization-{A65AEF0B-B822-4C24-B3BE-67EE9605EB86}.job [2012/07/06 16:38:06 | 000,048,211 | ---- | C] () -- C:\Users\currys\Desktop\checkoutPaypalComplete.asp.htm [2012/07/06 14:26:17 | 000,022,477 | ---- | C] () -- C:\Users\currys\Desktop\Argos - Thank you for your order number 201549843.eml [2012/07/06 13:47:29 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE [2012/07/06 11:46:44 | 000,000,890 | ---- | C] () -- C:\Users\currys\Desktop\baffledUK123.exe - Shortcut.lnk [2012/07/05 23:30:52 | 000,001,359 | ---- | C] () -- C:\Users\currys\Desktop\java - Shortcut.lnk [2012/07/05 00:18:12 | 000,016,968 | ---- | C] () -- C:\Users\currys\Untitled 1.odt [2012/07/04 11:19:01 | 000,001,802 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2012/07/04 10:42:09 | 000,002,525 | ---- | C] () -- C:\Users\currys\Desktop\HiJackThis.lnk [2012/07/04 00:33:10 | 000,064,364 | ---- | C] () -- C:\Users\currys\Documents\1059343-internet-options-control-panel-missing.html [2012/07/02 18:56:52 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/07/01 01:13:20 | 000,322,288 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2012/06/29 00:22:04 | 3220,320,256 | -HS- | C] () -- C:\hiberfil.sys [2012/06/29 00:06:55 | 000,000,900 | ---- | C] () -- C:\Users\currys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BBC iPlayer Desktop.lnk [2012/06/28 13:31:39 | 000,001,583 | ---- | C] () -- C:\Users\currys\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk [2012/06/26 23:39:39 | 000,000,134 | ---- | C] () -- C:\Users\currys\Desktop\Microsoft Fix it.url [2012/06/26 23:37:20 | 000,001,041 | ---- | C] () -- C:\Users\currys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2012/06/24 11:02:02 | 000,000,487 | ---- | C] () -- C:\Windows\wininit.ini [2012/06/23 11:26:11 | 000,000,860 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-118059262-2797764304-1290977041-1000Core.job [2012/06/23 10:44:14 | 000,000,002 | RHS- | C] () -- C:\Windows\winstart.bat [2012/06/23 10:44:11 | 000,000,876 | ---- | C] () -- C:\Users\currys\Desktop\Reanimator.lnk [2012/01/29 12:35:23 | 000,000,000 | ---- | C] () -- C:\Users\currys\AppData\Local\{A2C1D9E5-EF1E-4CB1-929A-1596A9DD93C5} [2012/01/01 19:41:40 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012/01/01 19:41:40 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012/01/01 19:41:40 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012/01/01 19:41:40 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012/01/01 19:41:40 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2011/12/29 20:48:31 | 000,016,918 | ---- | C] () -- C:\Users\currys\powerpoint-x-none.xml [2011/12/29 12:23:29 | 004,250,112 | ---- | C] () -- C:\Users\currys\powerpoint-x-none.msp [2011/12/26 14:05:56 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2011/12/02 23:16:09 | 000,001,043 | ---- | C] () -- C:\ProgramData\repository.xml [2011/06/17 21:23:38 | 000,000,094 | ---- | C] () -- C:\Users\currys\AppData\Local\fusioncache.dat [2011/03/15 19:37:45 | 000,029,520 | ---- | C] () -- C:\Windows\System32\SmartDefragBootTime.exe [2011/03/15 19:37:45 | 000,016,184 | ---- | C] () -- C:\Windows\System32\drivers\SmartDefragDriver.sys [2011/03/03 21:18:20 | 000,001,024 | ---- | C] () -- C:\Users\currys\.rnd [2011/03/03 21:18:09 | 000,000,000 | ---- | C] () -- C:\Windows\Irremote.ini [2011/02/06 01:16:30 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010/08/09 22:45:44 | 000,128,356 | ---- | C] () -- C:\Windows\System32\mlfcache.dat [2009/09/16 16:06:15 | 000,001,356 | ---- | C] () -- C:\Users\currys\AppData\Local\d3d9caps.dat [2009/06/23 22:13:57 | 000,024,206 | ---- | C] () -- C:\Users\currys\AppData\Roaming\UserTile.png [2009/06/16 18:02:15 | 000,000,000 | ---- | C] () -- C:\Users\currys\AppData\Roaming\wklnhst.dat [2009/06/15 20:10:47 | 000,211,968 | ---- | C] () -- C:\Users\currys\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ========== LOP Check ========== [2012/06/29 23:32:32 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\#ISW.FS# [2011/12/02 23:34:23 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Auslogics [2011/11/30 11:11:27 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\AVG10 [2012/07/01 01:10:52 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Azureus [2009/06/28 09:30:24 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\BBCiPlayerDesktop.61DB7A798358575D6A969CCD7 3DDBBD723A6DA9D.1 [2009/11/08 01:05:56 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Blitware [2009/06/23 23:20:53 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Canon [2012/05/06 11:42:39 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\CheckPoint [2012/06/29 23:59:57 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\DigitalSupport [2011/07/09 18:55:24 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\DMCache [2009/07/06 22:08:40 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\DriverCure [2011/06/09 23:09:10 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\FixCleaner [2012/06/18 23:34:17 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\FlashGet [2011/08/21 22:56:06 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\FrostWire [2011/07/09 22:30:36 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Internet Download Accelerator [2012/07/01 01:10:53 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\IObit [2011/12/02 19:27:27 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\iolo [2012/07/01 01:10:54 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\LimeWire [2012/02/02 01:12:53 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Media Finder [2011/12/15 21:53:55 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\OnlineArmor [2011/05/27 23:28:45 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\OpenCandy [2011/11/30 22:21:40 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\OpenOffice.org [2009/06/15 23:03:01 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Packard Bell [2011/07/09 18:14:06 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\ParetoLogic [2012/06/30 12:08:15 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\PC Cleaners [2011/10/21 23:37:50 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\PCCleaner [2012/05/21 23:36:31 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\PCPro [2009/06/23 22:13:57 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\PeerNetworking [2012/03/12 11:17:26 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\PerformerSoft [2011/11/30 01:00:18 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\RegistryKeys [2012/06/30 16:03:16 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Sammsoft [2012/06/29 23:33:07 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Simply Super Software [2011/12/10 00:39:29 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\SlimCleaner [2011/11/29 19:07:18 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\SpeedMaxPc [2012/06/04 17:06:02 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\SpeedyPC Software [2010/05/24 08:16:42 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\Sports Interactive [2011/12/29 11:45:09 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\T55 [2012/06/19 22:52:47 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\TestApp [2010/05/09 20:02:30 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\The Creative Assembly [2012/01/22 11:12:27 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\TP [2010/07/15 11:42:50 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\TuneUp Software [2012/07/05 22:39:08 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\TweakNow RegCleaner 2011 [2012/01/22 11:13:31 | 000,000,000 | ---D | M] -- C:\Users\currys\AppData\Roaming\{90140011-0061-0409-0000-0000000FF1CE} [2012/02/04 12:18:30 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\IObit [2012/02/04 12:18:30 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\IObit [2012/02/04 12:18:30 | 000,000,000 | ---D | M] -- C:\Users\UpdatusUser\AppData\Roaming\IObit [2012/07/10 19:00:04 | 000,000,342 | ---- | M] () -- C:\Windows\Tasks\Recovery DVD Creator-currys.job [2012/07/09 23:30:44 | 000,032,648 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2012/07/10 18:51:08 | 000,000,394 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{A65AEF0B-B822-4C24-B3BE-67EE9605EB86}.job ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2012/07/06 12:40:40 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN [2012/05/17 19:03:03 | 000,000,000 | ---D | M] -- C:\335cad22c2781a5a46ca189d [2012/01/04 00:08:27 | 000,000,000 | ---D | M] -- C:\ACER [2011/12/29 12:14:24 | 000,000,000 | ---D | M] -- C:\Autorun.inf [2012/06/30 08:29:58 | 000,000,000 | ---D | M] -- C:\Boot [2010/10/24 01:09:41 | 000,000,000 | ---D | M] -- C:\BraCa Soft [2011/12/26 14:09:46 | 000,000,000 | ---D | M] -- C:\cabs [2009/06/23 22:09:14 | 000,000,000 | ---D | M] -- C:\CanoScan [2012/07/06 11:49:41 | 000,000,000 | ---D | M] -- C:\ComboFix [2012/07/07 10:16:16 | 000,000,000 | ---D | M] -- C:\Config.Msi [2006/11/02 14:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2009/06/26 23:48:14 | 000,000,000 | ---D | M] -- C:\drivers [2012/07/01 01:10:35 | 000,000,000 | ---D | M] -- C:\f90e4393fac73d563b0e [2012/06/23 13:31:04 | 000,000,000 | ---D | M] -- C:\Kontiki [2011/06/18 09:16:34 | 000,000,000 | ---D | M] -- C:\Macromedia [2008/08/21 22:17:18 | 000,000,000 | R--D | M] -- C:\MSOCache [2012/04/03 18:52:45 | 000,000,000 | ---D | M] -- C:\NVIDIA [2011/12/17 18:20:59 | 000,000,000 | ---D | M] -- C:\perflogs [2012/07/05 22:39:08 | 000,000,000 | R--D | M] -- C:\Program Files [2012/07/06 12:15:14 | 000,000,000 | -H-D | M] -- C:\ProgramData [2012/07/06 12:49:50 | 000,000,000 | ---D | M] -- C:\Qoobox [2012/03/09 23:30:17 | 000,000,000 | ---D | M] -- C:\Reg_Backup [2012/07/10 18:57:56 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2012/07/01 01:11:07 | 000,000,000 | R--D | M] -- C:\Users [2012/07/06 16:34:02 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %windir%\Installer\*.* > [2012/04/22 22:37:42 | 001,182,720 | R--- | M] () -- C:\Windows\Installer\10022a7.msp [2011/06/13 10:35:09 | 000,219,648 | ---- | M] () -- C:\Windows\Installer\1171dd.msi [2009/03/20 11:48:56 | 000,183,808 | R--- | M] () -- C:\Windows\Installer\124062.msp [2009/12/11 09:49:42 | 000,324,608 | ---- | M] () -- C:\Windows\Installer\1263ed8d.msi [2009/12/11 09:51:09 | 000,821,760 | ---- | M] () -- C:\Windows\Installer\1263edd3.msi [2009/12/11 09:52:30 | 000,279,040 | ---- | M] () -- C:\Windows\Installer\1263ee06.msi [2009/12/11 09:52:50 | 000,577,024 | ---- | M] () -- C:\Windows\Installer\1263ee14.msi [2009/10/16 08:09:28 | 002,518,016 | R--- | M] () -- C:\Windows\Installer\1263ee24.msp [2008/08/21 22:19:45 | 000,061,952 | ---- | M] () -- C:\Windows\Installer\133082.mst [2011/12/26 06:06:20 | 005,115,392 | R--- | M] () -- C:\Windows\Installer\13876f.msp [2012/01/22 11:07:51 | 004,201,984 | ---- | M] () -- C:\Windows\Installer\13bf24.msi [2010/08/04 15:13:04 | 000,686,080 | R--- | M] () -- C:\Windows\Installer\13f9f50.msp [2008/08/21 22:19:45 | 000,061,952 | ---- | M] () -- C:\Windows\Installer\13fac2.mst [2011/01/16 11:43:05 | 000,415,744 | ---- | M] () -- C:\Windows\Installer\149f7c.msi [2011/09/15 19:37:40 | 037,148,160 | R--- | M] () -- C:\Windows\Installer\1543e9.msp [2011/09/15 19:37:52 | 034,428,416 | R--- | M] () -- C:\Windows\Installer\154408.msp [2010/04/24 17:10:46 | 008,486,400 | R--- | M] () -- C:\Windows\Installer\17537a0.msp [2010/04/24 17:07:04 | 010,118,144 | R--- | M] () -- C:\Windows\Installer\17537c1.msp [2010/04/24 17:07:58 | 004,667,392 | R--- | M] () -- C:\Windows\Installer\17537d2.msp [2010/03/24 18:54:54 | 002,516,992 | R--- | M] () -- C:\Windows\Installer\17537e3.msp [2010/04/24 17:08:48 | 009,129,984 | R--- | M] () -- C:\Windows\Installer\17537f4.msp [2010/04/24 17:09:46 | 011,750,912 | R--- | M] () -- C:\Windows\Installer\17537fc.msp [2009/06/16 22:29:21 | 000,648,192 | ---- | M] () -- C:\Windows\Installer\176fc53.msi [2011/12/01 23:59:50 | 010,988,544 | ---- | M] () -- C:\Windows\Installer\17df8d.msi [2011/07/27 07:39:50 | 009,892,352 | R--- | M] () -- C:\Windows\Installer\19c024f.msp [2011/09/06 21:48:02 | 008,181,248 | R--- | M] () -- C:\Windows\Installer\19c026c.msp [2011/08/10 17:42:04 | 007,070,208 | R--- | M] () -- C:\Windows\Installer\19c028d.msp [2011/09/06 21:46:22 | 009,006,080 | R--- | M] () -- C:\Windows\Installer\19c02ad.msp [2011/08/10 17:43:30 | 003,795,968 | R--- | M] () -- C:\Windows\Installer\19c02b5.msp [2011/11/15 20:44:06 | 001,435,136 | ---- | M] () -- C:\Windows\Installer\1a3843.msi [2012/01/22 11:09:26 | 001,700,352 | R--- | M] () -- C:\Windows\Installer\1af74f.msp [2012/01/30 21:46:22 | 007,069,184 | R--- | M] () -- C:\Windows\Installer\1af757.msp [2009/08/18 13:08:34 | 001,373,696 | R--- | M] () -- C:\Windows\Installer\1b940cf.msp [2009/07/27 04:31:24 | 003,738,624 | R--- | M] () -- C:\Windows\Installer\1b940d7.msp [2009/08/05 07:49:32 | 003,457,024 | R--- | M] () -- C:\Windows\Installer\1b940ff.msp [2010/01/14 20:49:10 | 000,463,360 | ---- | M] () -- C:\Windows\Installer\1c0b9ed5.msi [2009/08/18 13:57:54 | 009,122,304 | R--- | M] () -- C:\Windows\Installer\1c1063f.msp [2009/08/18 13:58:56 | 008,301,056 | R--- | M] () -- C:\Windows\Installer\1c10650.msp [2009/08/18 14:19:26 | 010,098,688 | R--- | M] () -- C:\Windows\Installer\1c10668.msp [2012/05/19 12:42:02 | 000,492,544 | ---- | M] () -- C:\Windows\Installer\1d2224.msi [2010/07/23 02:03:24 | 000,338,432 | R--- | M] () -- C:\Windows\Installer\1d821ac.msp [2009/08/08 18:09:01 | 000,152,576 | ---- | M] () -- C:\Windows\Installer\1df1552.msi [2009/08/11 23:51:12 | 000,550,912 | ---- | M] () -- C:\Windows\Installer\1df1e3a.msi [2009/08/11 23:51:54 | 000,613,376 | ---- | M] () -- C:\Windows\Installer\1df1e6c.msi [2009/08/11 23:52:00 | 000,444,416 | ---- | M] () -- C:\Windows\Installer\1df1e74.msi [2009/06/28 09:49:03 | 002,862,592 | ---- | M] () -- C:\Windows\Installer\1df8f3.msi [2012/07/05 00:20:50 | 000,228,864 | ---- | M] () -- C:\Windows\Installer\1f436a7.msi [2011/09/12 20:12:50 | 002,295,808 | ---- | M] () -- C:\Windows\Installer\2192cdf.msi [2008/12/13 09:58:22 | 000,754,688 | R--- | M] () -- C:\Windows\Installer\22de62e.msp [2009/05/26 18:53:56 | 000,579,072 | R--- | M] () -- C:\Windows\Installer\22de63e.msp [2009/04/04 11:36:32 | 021,390,848 | R--- | M] () -- C:\Windows\Installer\22de669.msp [2009/04/04 17:08:40 | 343,058,432 | R--- | M] () -- C:\Windows\Installer\22de753.msp [2009/04/24 12:28:00 | 004,450,816 | R--- | M] () -- C:\Windows\Installer\22de788.msp [2009/02/25 19:08:18 | 008,311,808 | R--- | M] () -- C:\Windows\Installer\22de798.msp [2009/04/24 12:30:16 | 002,583,552 | R--- | M] () -- C:\Windows\Installer\22de7be.msp [2009/05/04 07:47:22 | 009,124,864 | R--- | M] () -- C:\Windows\Installer\22de7de.msp [2011/06/17 20:51:40 | 003,443,712 | ---- | M] () -- C:\Windows\Installer\2355581.msi [2009/11/25 01:00:28 | 000,429,568 | ---- | M] () -- C:\Windows\Installer\23a02a.msi [2011/11/22 00:07:36 | 017,191,936 | R--- | M] () -- C:\Windows\Installer\25094f.msp [2009/04/04 18:09:34 | 015,190,016 | R--- | M] () -- C:\Windows\Installer\28cce1a.msp [2009/04/04 18:10:08 | 009,926,144 | R--- | M] () -- C:\Windows\Installer\28cce46.msp [2009/04/04 18:10:16 | 007,888,384 | R--- | M] () -- C:\Windows\Installer\28cce4f.msp [2009/04/04 18:10:24 | 001,282,560 | R--- | M] () -- C:\Windows\Installer\28cce56.msp [2011/09/21 17:18:24 | 004,985,856 | R--- | M] () -- C:\Windows\Installer\2b0694.msp [2010/08/13 18:00:36 | 009,404,928 | R--- | M] () -- C:\Windows\Installer\2bde389.msp [2010/08/13 18:02:20 | 002,545,664 | R--- | M] () -- C:\Windows\Installer\2bde391.msp [2010/08/13 17:59:46 | 008,182,272 | R--- | M] () -- C:\Windows\Installer\2bde3a8.msp [2010/08/13 18:01:28 | 008,993,280 | R--- | M] () -- C:\Windows\Installer\2bde3c8.msp [2009/06/28 09:19:34 | 000,583,680 | ---- | M] () -- C:\Windows\Installer\2cdad.msi [2012/07/05 23:19:12 | 000,863,744 | ---- | M] () -- C:\Windows\Installer\2d235db.msi [2012/07/05 23:20:05 | 000,176,128 | ---- | M] () -- C:\Windows\Installer\2d235e7.msi [2011/12/22 17:50:54 | 000,256,000 | R--- | M] () -- C:\Windows\Installer\2dc91f.msp [2012/01/19 14:37:24 | 008,999,936 | R--- | M] () -- C:\Windows\Installer\2dc92a.msp [2011/12/15 14:40:40 | 023,374,336 | R--- | M] () -- C:\Windows\Installer\2dc93b.msp [2009/04/04 07:35:48 | 036,977,152 | R--- | M] () -- C:\Windows\Installer\2e5bb0f.msp [2009/05/04 07:46:14 | 008,299,008 | R--- | M] () -- C:\Windows\Installer\2e5bb21.msp [2009/04/14 04:49:26 | 001,922,560 | R--- | M] () -- C:\Windows\Installer\2e5bb3c.msp [2010/12/30 00:34:10 | 001,710,592 | ---- | M] () -- C:\Windows\Installer\2e98d73.msi [2010/12/30 00:39:17 | 001,984,000 | ---- | M] () -- C:\Windows\Installer\2e98dbb.msi [2008/08/21 22:19:45 | 000,061,952 | ---- | M] () -- C:\Windows\Installer\2efac3.mst [2008/08/21 22:19:45 | 000,061,952 | ---- | M] () -- C:\Windows\Installer\300251.mst [2008/08/21 22:19:45 | 000,061,952 | ---- | M] () -- C:\Windows\Installer\30f18f.mst [2011/06/16 00:08:52 | 000,467,456 | ---- | M] () -- C:\Windows\Installer\330c6c9.msi [2011/04/13 11:37:02 | 019,201,024 | R--- | M] () -- C:\Windows\Installer\330c6d6.msp [2011/04/29 12:33:30 | 008,173,568 | R--- | M] () -- C:\Windows\Installer\330c6dd.msp [2011/03/25 09:03:44 | 005,079,552 | R--- | M] () -- C:\Windows\Installer\330c6f3.msp [2011/06/16 00:24:33 | 000,223,744 | ---- | M] () -- C:\Windows\Installer\330c703.msi [2011/04/29 12:28:40 | 001,995,264 | R--- | M] () -- C:\Windows\Installer\330c70a.msp [2011/04/29 12:31:46 | 009,006,080 | R--- | M] () -- C:\Windows\Installer\330c730.msp [2009/07/01 10:51:21 | 001,013,248 | ---- | M] () -- C:\Windows\Installer\33d7038.msi [2011/10/16 08:15:06 | 000,028,160 | ---- | M] () -- C:\Windows\Installer\34eb5.msi [2010/01/21 21:23:34 | 000,119,296 | ---- | M] () -- C:\Windows\Installer\35f25e.msi [2012/04/04 14:32:41 | 016,613,376 | R--- | M] () -- C:\Windows\Installer\39647.msp [2011/12/26 23:33:26 | 000,501,248 | ---- | M] () -- C:\Windows\Installer\3d96e.msi [2011/12/26 23:33:33 | 001,713,152 | ---- | M] () -- C:\Windows\Installer\3d973.msi [2011/12/26 23:33:42 | 002,022,912 | ---- | M] () -- C:\Windows\Installer\3d978.msi [2011/12/26 23:33:49 | 001,640,960 | ---- | M] () -- C:\Windows\Installer\3d97d.msi [2011/12/26 23:33:55 | 000,513,024 | ---- | M] () -- C:\Windows\Installer\3d982.msi [2011/12/26 23:33:59 | 000,516,608 | ---- | M] () -- C:\Windows\Installer\3d988.msi [2011/12/26 23:34:03 | 000,506,880 | ---- | M] () -- C:\Windows\Installer\3d98e.msi [2011/12/26 23:34:06 | 000,501,248 | ---- | M] () -- C:\Windows\Installer\3d993.msi [2011/12/26 23:34:11 | 001,652,736 | ---- | M] () -- C:\Windows\Installer\3d998.msi [2011/12/26 23:34:23 | 002,397,184 | ---- | M] () -- C:\Windows\Installer\3d99d.msi [2009/06/15 18:14:33 | 000,024,064 | ---- | M] () -- C:\Windows\Installer\411500.msi [2010/09/24 07:08:50 | 017,518,080 | R--- | M] () -- C:\Windows\Installer\42115fb.msp [2009/06/15 17:14:16 | 001,479,680 | ---- | M] () -- C:\Windows\Installer\433d5.msi [2011/09/05 23:01:26 | 013,135,872 | R--- | M] () -- C:\Windows\Installer\4477b.msp [2010/06/25 22:48:50 | 001,160,192 | ---- | M] () -- C:\Windows\Installer\45ed8e.msi [2011/06/25 12:07:39 | 000,066,048 | ---- | M] () -- C:\Windows\Installer\4827ef.msi [2011/06/25 12:08:05 | 000,855,040 | ---- | M] () -- C:\Windows\Installer\48285c.msi [2010/05/18 17:29:30 | 000,822,272 | ---- | M] () -- C:\Windows\Installer\4c3c7cd.msi [2012/07/04 10:42:09 | 001,094,656 | ---- | M] () -- C:\Windows\Installer\4e5d046.msi [2010/03/04 19:48:30 | 000,228,352 | ---- | M] () -- C:\Windows\Installer\4ebadb9.msi [2011/11/11 17:15:00 | 001,795,584 | R--- | M] () -- C:\Windows\Installer\52fce5.msp [2011/12/21 23:19:28 | 000,036,352 | ---- | M] () -- C:\Windows\Installer\52fcee.msi [2011/12/21 23:19:30 | 023,622,656 | R--- | M] () -- C:\Windows\Installer\52fcf4.msp [2010/01/10 10:44:58 | 000,855,040 | ---- | M] () -- C:\Windows\Installer\548b5f2.msi [2012/05/06 11:36:40 | 000,041,472 | ---- | M] () -- C:\Windows\Installer\54a07e6.msi [2012/05/06 11:36:49 | 000,028,672 | ---- | M] () -- C:\Windows\Installer\54a081a.msi [2012/05/06 11:37:02 | 000,039,936 | ---- | M] () -- C:\Windows\Installer\54a0820.msi [2010/11/20 23:33:46 | 001,980,928 | R--- | M] () -- C:\Windows\Installer\54e58e.msp [2011/01/11 17:50:38 | 008,177,152 | R--- | M] () -- C:\Windows\Installer\54e59c.msp [2011/03/17 20:01:58 | 009,563,648 | R--- | M] () -- C:\Windows\Installer\54e5b3.msp [2011/02/11 08:43:44 | 010,951,168 | R--- | M] () -- C:\Windows\Installer\54e5d5.msp [2010/11/20 23:34:34 | 001,198,080 | R--- | M] () -- C:\Windows\Installer\54e5dc.msp [2010/11/20 23:32:52 | 004,165,120 | R--- | M] () -- C:\Windows\Installer\54e5f4.msp [2011/03/17 20:00:20 | 000,090,624 | R--- | M] () -- C:\Windows\Installer\54e5fb.msp [2011/01/11 17:49:20 | 009,003,008 | R--- | M] () -- C:\Windows\Installer\54e60c.msp [2008/08/21 22:05:38 | 000,115,200 | ---- | M] () -- C:\Windows\Installer\582f9.msi [2008/08/21 22:08:06 | 014,308,864 | ---- | M] () -- C:\Windows\Installer\58302.msi [2008/08/21 22:08:37 | 006,092,288 | ---- | M] () -- C:\Windows\Installer\58303.msi [2008/08/21 22:09:56 | 001,244,672 | ---- | M] () -- C:\Windows\Installer\58309.msi [2008/08/21 22:15:48 | 000,100,352 | ---- | M] () -- C:\Windows\Installer\58316.msi [2008/08/21 22:18:24 | 001,640,960 | ---- | M] () -- C:\Windows\Installer\58337.msi [2008/08/21 22:19:43 | 009,613,312 | ---- | M] () -- C:\Windows\Installer\58365.msi [2008/05/14 07:46:44 | 009,577,984 | R--- | M] () -- C:\Windows\Installer\58366.msp [2007/03/21 22:46:29 | 008,198,656 | R--- | M] () -- C:\Windows\Installer\58382.msp [2007/03/21 22:46:29 | 002,047,488 | R--- | M] () -- C:\Windows\Installer\5839e.msp [2008/08/21 22:21:46 | 000,360,448 | ---- | M] () -- C:\Windows\Installer\583a9.msi [2008/02/15 09:54:20 | 009,736,192 | R--- | M] () -- C:\Windows\Installer\583ce.msp [2007/10/15 00:43:32 | 021,981,184 | R--- | M] () -- C:\Windows\Installer\583d6.msp [2007/10/15 00:43:14 | 229,852,160 | R--- | M] () -- C:\Windows\Installer\584b2.msp [2009/04/14 05:50:22 | 005,191,680 | R--- | M] () -- C:\Windows\Installer\58bd0.msp [2009/04/14 05:56:18 | 020,498,944 | R--- | M] () -- C:\Windows\Installer\58be7.msp [2009/05/07 10:04:06 | 018,341,376 | R--- | M] () -- C:\Windows\Installer\58bef.msp [2009/04/14 04:46:12 | 015,438,848 | R--- | M] () -- C:\Windows\Installer\58bf7.msp [2009/04/14 05:51:24 | 001,303,040 | R--- | M] () -- C:\Windows\Installer\58bff.msp [2009/04/14 05:21:34 | 015,303,168 | R--- | M] () -- C:\Windows\Installer\58c07.msp [2011/04/28 17:51:24 | 001,375,744 | R--- | M] () -- C:\Windows\Installer\5bfb3.msp [2011/10/26 16:38:54 | 002,830,848 | R--- | M] () -- C:\Windows\Installer\5c073.msp [2012/01/12 03:01:16 | 021,030,912 | R--- | M] () -- C:\Windows\Installer\5c0a3.msp [2011/06/14 00:04:08 | 000,223,232 | ---- | M] () -- C:\Windows\Installer\5da4c.msi [2011/06/14 00:16:47 | 003,589,632 | ---- | M] () -- C:\Windows\Installer\5da8f.msi [2011/06/14 00:16:49 | 002,087,936 | ---- | M] () -- C:\Windows\Installer\5da93.msi [2011/06/14 00:16:52 | 000,023,040 | ---- | M] () -- C:\Windows\Installer\5da97.msi [2011/06/14 00:17:02 | 004,427,776 | R--- | M] () -- C:\Windows\Installer\5daa6.msp [2011/06/14 00:17:14 | 000,030,720 | ---- | M] () -- C:\Windows\Installer\5daaa.msi [2011/06/14 00:17:22 | 002,932,736 | R--- | M] () -- C:\Windows\Installer\5dabe.msp [2011/06/14 00:17:29 | 000,071,680 | ---- | M] () -- C:\Windows\Installer\5dac2.msi [2011/06/14 00:17:36 | 000,022,016 | ---- | M] () -- C:\Windows\Installer\5dac6.msi [2011/06/14 00:17:42 | 000,191,488 | ---- | M] () -- C:\Windows\Installer\5daca.msi [2011/06/14 00:17:52 | 000,301,056 | ---- | M] () -- C:\Windows\Installer\5dace.msi [2011/06/14 00:17:55 | 000,022,528 | ---- | M] () -- C:\Windows\Installer\5dad2.msi [2011/06/14 00:18:02 | 000,238,080 | ---- | M] () -- C:\Windows\Installer\5dad6.msi [2011/06/14 00:18:06 | 000,136,704 | R--- | M] () -- C:\Windows\Installer\5dadb.msp [2011/06/14 00:18:18 | 000,212,992 | ---- | M] () -- C:\Windows\Installer\5dadf.msi [2011/06/14 00:18:21 | 001,139,712 | R--- | M] () -- C:\Windows\Installer\5daeb.msp [2011/06/14 00:18:29 | 000,058,880 | ---- | M] () -- C:\Windows\Installer\5daef.msi [2011/06/14 00:18:40 | 000,200,192 | ---- | M] () -- C:\Windows\Installer\5daf3.msi [2011/06/14 00:18:48 | 003,314,688 | R--- | M] () -- C:\Windows\Installer\5db0f.msp [2011/06/14 00:19:13 | 000,417,792 | ---- | M] () -- C:\Windows\Installer\5db15.msi [2011/06/14 00:19:20 | 005,514,240 | R--- | M] () -- C:\Windows\Installer\5db28.msp [2011/06/14 00:19:31 | 000,022,016 | ---- | M] () -- C:\Windows\Installer\5db2d.msi [2011/06/14 00:19:36 | 000,025,600 | ---- | M] () -- C:\Windows\Installer\5db31.msi [2011/06/14 00:19:41 | 000,038,912 | R--- | M] () -- C:\Windows\Installer\5db36.msp [2011/06/14 00:19:59 | 000,714,240 | ---- | M] () -- C:\Windows\Installer\5db3a.msi [2011/06/14 00:20:09 | 005,870,080 | R--- | M] () -- C:\Windows\Installer\5db51.msp [2011/06/14 00:20:22 | 000,205,312 | ---- | M] () -- C:\Windows\Installer\5db55.msi [2011/06/14 00:20:29 | 002,958,336 | R--- | M] () -- C:\Windows\Installer\5db6f.msp [2011/06/14 00:20:38 | 000,891,904 | ---- | M] () -- C:\Windows\Installer\5db73.msi [2011/06/14 00:21:12 | 000,216,064 | ---- | M] () -- C:\Windows\Installer\5db77.msi [2011/06/14 00:21:27 | 014,617,088 | R--- | M] () -- C:\Windows\Installer\5dba2.msp [2011/06/14 00:21:43 | 000,074,752 | ---- | M] () -- C:\Windows\Installer\5dba7.msi [2011/06/14 00:21:50 | 003,733,504 | R--- | M] () -- C:\Windows\Installer\5dbb0.msp [2011/06/14 00:21:57 | 000,187,904 | ---- | M] () -- C:\Windows\Installer\5dbb5.msi [2011/06/14 00:22:01 | 000,205,312 | R--- | M] () -- C:\Windows\Installer\5dbbf.msp [2011/06/14 00:22:22 | 000,139,264 | ---- | M] () -- C:\Windows\Installer\5dbc3.msi [2011/06/14 00:22:22 | 000,113,664 | R--- | M] () -- C:\Windows\Installer\5dc00.msp [2011/06/14 00:22:33 | 000,024,064 | ---- | M] () -- C:\Windows\Installer\5dc04.msi [2011/06/14 00:22:44 | 000,277,504 | ---- | M] () -- C:\Windows\Installer\5dc08.msi [2011/06/14 00:22:57 | 000,973,824 | ---- | M] () -- C:\Windows\Installer\5dc0c.msi [2011/06/14 00:23:04 | 000,099,840 | ---- | M] () -- C:\Windows\Installer\5dc10.msi [2011/06/14 00:23:10 | 001,830,400 | R--- | M] () -- C:\Windows\Installer\5dc19.msp [2011/06/14 00:23:16 | 000,022,016 | ---- | M] () -- C:\Windows\Installer\5dc1d.msi [2011/06/14 00:23:23 | 000,029,184 | ---- | M] () -- C:\Windows\Installer\5dc21.msi [2011/06/14 00:23:29 | 000,624,640 | R--- | M] () -- C:\Windows\Installer\5dc2a.msp [2011/06/14 00:23:36 | 000,022,528 | ---- | M] () -- C:\Windows\Installer\5dc2e.msi [2011/06/14 00:23:41 | 000,468,480 | R--- | M] () -- C:\Windows\Installer\5dc38.msp [2011/06/14 00:23:59 | 000,023,552 | ---- | M] () -- C:\Windows\Installer\5dc3d.msi [2011/06/14 00:24:09 | 005,124,608 | R--- | M] () -- C:\Windows\Installer\5dc47.msp [2011/06/14 00:24:19 | 000,022,528 | ---- | M] () -- C:\Windows\Installer\5dc4c.msi [2011/06/14 00:24:24 | 000,636,928 | R--- | M] () -- C:\Windows\Installer\5dc52.msp [2011/06/14 00:24:33 | 000,201,216 | ---- | M] () -- C:\Windows\Installer\5dc56.msi [2011/06/14 00:24:38 | 000,510,976 | R--- | M] () -- C:\Windows\Installer\5dc5b.msp [2011/06/14 00:24:48 | 000,023,552 | ---- | M] () -- C:\Windows\Installer\5dc60.msi [2011/06/14 00:24:55 | 002,144,256 | R--- | M] () -- C:\Windows\Installer\5dc6b.msp [2011/06/14 00:25:01 | 000,021,504 | ---- | M] () -- C:\Windows\Installer\5dc70.msi [2011/06/14 00:25:06 | 000,060,416 | R--- | M] () -- C:\Windows\Installer\5dc75.msp [2011/06/14 00:25:13 | 000,021,504 | ---- | M] () -- C:\Windows\Installer\5dc7a.msi [2011/06/14 00:25:18 | 000,023,552 | R--- | M] () -- C:\Windows\Installer\5dc7f.msp [2011/06/14 00:25:29 | 000,087,552 | ---- | M] () -- C:\Windows\Installer\5dc83.msi [2011/06/14 00:25:33 | 000,022,528 | ---- | M] () -- C:\Windows\Installer\5dc87.msi [2011/06/14 00:25:39 | 000,022,528 | ---- | M] () -- C:\Windows\Installer\5dc8b.msi [2011/06/14 00:25:44 | 000,022,016 | ---- | M] () -- C:\Windows\Installer\5dc8f.msi [2011/06/14 00:25:50 | 000,020,992 | ---- | M] () -- C:\Windows\Installer\5dc93.msi [2011/06/14 00:25:56 | 000,038,912 | ---- | M] () -- C:\Windows\Installer\5dc97.msi [2011/06/14 00:26:01 | 000,024,576 | R--- | M] () -- C:\Windows\Installer\5dc9d.msp [2010/03/06 01:03:22 | 000,195,584 | ---- | M] () -- C:\Windows\Installer\5dd609.msi [2011/12/18 01:02:51 | 000,026,624 | ---- | M] () -- C:\Windows\Installer\5e727.msi [2010/08/13 13:58:24 | 000,540,160 | R--- | M] () -- C:\Windows\Installer\5e73b.msp [2010/08/27 16:34:58 | 000,540,160 | R--- | M] () -- C:\Windows\Installer\5e73c.msp [2010/09/30 19:13:46 | 000,680,960 | R--- | M] () -- C:\Windows\Installer\5e73d.msp [2011/02/08 18:20:46 | 000,843,264 | R--- | M] () -- C:\Windows\Installer\5e73e.msp [2011/02/15 11:19:46 | 000,818,688 | R--- | M] () -- C:\Windows\Installer\5e73f.msp [2011/03/08 12:33:20 | 000,818,688 | R--- | M] () -- C:\Windows\Installer\5e740.msp [2011/05/31 21:16:38 | 000,959,488 | R--- | M] () -- C:\Windows\Installer\5e741.msp [2011/11/15 12:38:46 | 000,665,600 | R--- | M] () -- C:\Windows\Installer\5e742.msp [2011/01/24 18:16:02 | 000,014,336 | R--- | M] () -- C:\Windows\Installer\5ed4c.msp [2011/08/22 00:14:54 | 020,647,936 | R--- | M] () -- C:\Windows\Installer\5ed74.msp [2010/09/23 21:02:28 | 000,798,208 | R--- | M] () -- C:\Windows\Installer\64e32c8.msp [2011/04/07 03:43:30 | 123,313,664 | R--- | M] () -- C:\Windows\Installer\6a344b.msp [2011/05/18 22:55:38 | 019,624,448 | R--- | M] () -- C:\Windows\Installer\6a345b.msp [2011/04/28 10:54:26 | 002,720,768 | R--- | M] () -- C:\Windows\Installer\6a3461.msp [2009/04/24 12:38:18 | 001,229,312 | R--- | M] () -- C:\Windows\Installer\6ac672.msp [2009/04/24 12:31:18 | 001,425,920 | R--- | M] () -- C:\Windows\Installer\6ac67c.msp [2010/10/07 19:43:04 | 001,980,416 | R--- | M] () -- C:\Windows\Installer\6bfe255.msp [2010/09/17 07:04:16 | 009,401,856 | R--- | M] () -- C:\Windows\Installer\6bfe263.msp [2010/10/21 21:05:14 | 002,086,912 | ---- | M] () -- C:\Windows\Installer\6e3648.msi [2010/07/10 20:06:20 | 010,120,192 | R--- | M] () -- C:\Windows\Installer\6e7adc.msp [2010/07/10 20:14:14 | 002,850,816 | R--- | M] () -- C:\Windows\Installer\6e7ae4.msp [2010/02/21 01:03:34 | 004,472,832 | R--- | M] () -- C:\Windows\Installer\6f912fd.msp [2010/03/22 16:03:14 | 011,732,992 | R--- | M] () -- C:\Windows\Installer\6f91305.msp [2011/04/29 12:30:12 | 001,197,056 | R--- | M] () -- C:\Windows\Installer\73df8d.msp [2011/04/29 12:27:04 | 004,158,464 | R--- | M] () -- C:\Windows\Installer\73dfa4.msp [2009/06/15 20:01:20 | 000,432,640 | ---- | M] () -- C:\Windows\Installer\78d94.msi [2012/01/03 18:58:05 | 015,929,344 | R--- | M] () -- C:\Windows\Installer\7b72f.msp [2011/11/28 20:18:12 | 000,062,464 | ---- | M] () -- C:\Windows\Installer\7bbce.msi [2010/12/11 04:04:38 | 000,472,064 | ---- | M] () -- C:\Windows\Installer\7f20b3.msi [2012/07/06 18:53:47 | 003,105,280 | ---- | M] () -- C:\Windows\Installer\7f469c.msi [2010/02/21 02:00:02 | 008,480,768 | R--- | M] () -- C:\Windows\Installer\8479f8.msp [2010/02/04 18:24:30 | 009,122,304 | R--- | M] () -- C:\Windows\Installer\847a18.msp [2011/12/26 10:02:58 | 019,677,184 | R--- | M] () -- C:\Windows\Installer\90ddc.msp [2011/12/25 06:40:46 | 000,819,200 | R--- | M] () -- C:\Windows\Installer\90de2.msp [2009/07/28 19:30:26 | 000,326,144 | ---- | M] () -- C:\Windows\Installer\910cb.msi [2009/07/28 19:30:32 | 000,320,512 | ---- | M] () -- C:\Windows\Installer\910d0.msi [2009/07/28 19:30:47 | 000,432,640 | ---- | M] () -- C:\Windows\Installer\910e2.msi [2009/07/28 19:30:52 | 000,519,680 | ---- | M] () -- C:\Windows\Installer\910e7.msi [2009/07/28 19:30:58 | 000,592,896 | ---- | M] () -- C:\Windows\Installer\910ec.msi [2009/07/28 19:31:00 | 000,501,248 | ---- | M] () -- C:\Windows\Installer\910f1.msi [2009/07/28 19:31:08 | 000,121,344 | ---- | M] () -- C:\Windows\Installer\910f6.msi [2009/07/28 19:31:29 | 000,367,616 | ---- | M] () -- C:\Windows\Installer\9110d.msi [2009/07/28 19:31:37 | 000,121,344 | ---- | M] () -- C:\Windows\Installer\91112.msi [2009/07/28 19:31:46 | 000,647,680 | ---- | M] () -- C:\Windows\Installer\9111c.msi [2009/07/28 19:32:14 | 000,472,576 | ---- | M] () -- C:\Windows\Installer\91136.msi [2009/07/28 19:32:15 | 000,339,968 | ---- | M] () -- C:\Windows\Installer\9113d.msi [2009/07/28 19:32:20 | 000,121,344 | ---- | M] () -- C:\Windows\Installer\91142.msi [2009/07/28 19:32:23 | 000,596,480 | ---- | M] () -- C:\Windows\Installer\9114a.msi [2009/07/28 19:32:27 | 000,121,344 | ---- | M] () -- C:\Windows\Installer\9114f.msi [2009/07/28 19:32:41 | 000,343,552 | ---- | M] () -- C:\Windows\Installer\91157.msi [2009/07/28 19:33:26 | 000,988,160 | ---- | M] () -- C:\Windows\Installer\9117b.msi [2009/07/28 19:33:32 | 000,510,976 | ---- | M] () -- C:\Windows\Installer\91180.msi [2009/07/28 19:33:35 | 000,312,320 | ---- | M] () -- C:\Windows\Installer\91185.msi [2009/07/28 19:33:37 | 000,211,968 | ---- | M] () -- C:\Windows\Installer\9118a.msi [2009/07/28 19:33:39 | 000,623,616 | ---- | M] () -- C:\Windows\Installer\91190.msi [2009/07/28 19:35:46 | 000,634,880 | ---- | M] () -- C:\Windows\Installer\91195.msi [2009/07/28 19:35:51 | 000,301,568 | ---- | M] () -- C:\Windows\Installer\9119a.msi [2009/07/28 19:35:56 | 000,328,192 | ---- | M] () -- C:\Windows\Installer\911a0.msi [2012/03/15 13:43:28 | 004,216,320 | R--- | M] () -- C:\Windows\Installer\9e5ef9.msp [2012/02/17 08:45:24 | 002,299,392 | R--- | M] () -- C:\Windows\Installer\a47c8.msp [2012/04/28 21:43:58 | 008,459,264 | R--- | M] () -- C:\Windows\Installer\a47e8.msp [2012/03/15 02:24:28 | 001,795,584 | R--- | M] () -- C:\Windows\Installer\a47fd.msp [2011/11/01 13:34:26 | 001,169,920 | R--- | M] () -- C:\Windows\Installer\a4813.msp [2011/11/01 13:34:28 | 002,247,168 | R--- | M] () -- C:\Windows\Installer\a4828.msp [2012/04/04 22:38:16 | 003,620,864 | R--- | M] () -- C:\Windows\Installer\a4834.msp [2012/04/28 21:44:02 | 009,586,176 | R--- | M] () -- C:\Windows\Installer\a4868.msp [2012/03/23 14:59:02 | 007,899,648 | R--- | M] () -- C:\Windows\Installer\a487d.msp [2011/11/01 13:34:56 | 004,250,112 | R--- | M] () -- C:\Windows\Installer\a48a1.msp [2012/04/28 21:44:02 | 009,101,824 | R--- | M] () -- C:\Windows\Installer\a48c1.msp [2012/04/04 22:38:44 | 002,831,360 | R--- | M] () -- C:\Windows\Installer\a48d6.msp [2010/07/23 02:04:08 | 011,395,072 | R--- | M] () -- C:\Windows\Installer\a9da0.msp [2011/07/27 08:37:28 | 011,592,192 | R--- | M] () -- C:\Windows\Installer\a9dc5.msp [2011/01/03 12:28:08 | 000,092,672 | ---- | M] () -- C:\Windows\Installer\aae07f.msi [2011/01/03 12:29:53 | 000,018,944 | ---- | M] () -- C:\Windows\Installer\aae088.msi [2010/12/21 10:29:44 | 009,472,000 | ---- | M] () -- C:\Windows\Installer\bb1b0.msi [2011/06/18 09:08:44 | 019,210,240 | R--- | M] () -- C:\Windows\Installer\ccdf0.msp [2009/10/16 07:08:48 | 002,237,952 | R--- | M] () -- C:\Windows\Installer\d2b186.msp [2009/06/23 22:38:16 | 000,691,200 | ---- | M] () -- C:\Windows\Installer\d2e1d8.msi [2009/07/28 23:55:44 | 000,248,832 | ---- | M] () -- C:\Windows\Installer\d7bc64.msi [2009/04/24 12:29:02 | 009,013,760 | R--- | M] () -- C:\Windows\Installer\da822.msp [2010/10/12 13:54:19 | 000,212,992 | ---- | M] () -- C:\Windows\Installer\db5538.msi [2010/12/10 13:47:21 | 000,083,456 | ---- | M] () -- C:\Windows\Installer\dbc9e.msi [2012/03/28 20:48:47 | 000,022,016 | ---- | M] () -- C:\Windows\Installer\e1fb7.msi [2011/11/01 14:34:30 | 002,531,840 | R--- | M] () -- C:\Windows\Installer\eae3c9.msp [2011/11/01 14:34:30 | 001,552,384 | R--- | M] () -- C:\Windows\Installer\eae3dc.msp [2008/08/21 22:19:45 | 000,061,952 | ---- | M] () -- C:\Windows\Installer\ef0b4.mst [2008/08/21 22:19:45 | 000,061,952 | ---- | M] () -- C:\Windows\Installer\fbb81.mst [2011/07/12 15:50:24 | 017,555,968 | R--- | M] () -- C:\Windows\Installer\fd45f0.msp [2011/07/11 17:19:28 | 010,619,904 | R--- | M] () -- C:\Windows\Installer\fd45fb.msp [2011/12/21 01:05:47 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{05BFB060-4F22-4710-B0A2-2801A1B606C5}.SchedServiceConfig.rmi [2011/06/14 00:16:49 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}.SchedServiceConfig.rmi [2010/12/30 00:42:01 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{308B6AEA-DE50-4666-996D-0FA461719D6B}.SchedServiceConfig.rmi [2012/06/20 00:19:39 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{3C3901C5-3455-3E0A-A214-0B093A5070A6}.SchedServiceConfig.rmi [2011/06/13 13:45:27 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{774088D4-0777-4D78-904D-E435B318F5D2}.SchedServiceConfig.rmi [2010/08/08 12:09:17 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{85991ED2-010C-4930-96FA-52F43C2CE98A}.SchedServiceConfig.rmi [2010/05/03 13:52:23 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{9DE1BE03-AFE2-4CDB-BFEB-D06D736CD01A}.SchedServiceConfig.rmi [2009/11/16 23:03:30 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}.SchedServiceConfig.rmi [2009/08/10 15:00:58 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}.SchedServiceConfig.rmi [2011/06/14 00:22:57 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{F53D678E-238F-4A71-9742-08BB6774E9DC}.SchedServiceConfig.rmi < %windir%\system32\tasks\*.* > [2012/06/23 13:46:14 | 000,003,682 | ---- | M] () -- C:\Windows\system32\tasks\Adobe Flash Player Updater [2010/07/15 21:33:02 | 000,003,678 | ---- | M] () -- C:\Windows\system32\tasks\Adobe Reader and Acrobat Manager [2012/02/26 13:05:42 | 000,003,082 | ---- | M] () -- C:\Windows\system32\tasks\ASC5_PerformanceMonitor [2010/04/21 19:49:15 | 000,003,160 | ---- | M] () -- C:\Windows\system32\tasks\CreateChoiceProcessTask [2011/02/26 04:52:51 | 000,003,060 | ---- | M] () -- C:\Windows\system32\tasks\Game_Booster_Startup [2012/03/28 20:48:09 | 000,003,630 | ---- | M] () -- C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore [2012/03/28 20:48:15 | 000,003,882 | ---- | M] () -- C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA [2010/07/15 21:33:02 | 000,003,660 | ---- | M] () -- C:\Windows\system32\tasks\HP online update program [2010/08/08 16:30:13 | 000,003,846 | ---- | M] () -- C:\Windows\system32\tasks\Real Networks Scheduler [2011/11/15 23:46:18 | 000,003,196 | ---- | M] () -- C:\Windows\system32\tasks\RealUpgradeLogonTaskS-1-5-21-118059262-2797764304-1290977041-1000 [2011/11/15 23:46:18 | 000,003,328 | ---- | M] () -- C:\Windows\system32\tasks\RealUpgradeScheduledTaskS-1-5-21-118059262-2797764304-1290977041-1000 [2009/06/15 16:54:52 | 000,003,202 | ---- | M] () -- C:\Windows\system32\tasks\Recovery DVD Creator-currys [2010/10/21 21:05:16 | 000,003,806 | ---- | M] () -- C:\Windows\system32\tasks\Scheduled Update for Ask Toolbar [2010/07/17 23:06:11 | 000,002,758 | ---- | M] () -- C:\Windows\system32\tasks\TuneUpUtilities_Task_BkGndMaintenance [2012/05/14 19:43:35 | 000,003,686 | ---- | M] () -- C:\Windows\system32\tasks\User_Feed_Synchronization-{5FCC3B7B-7333-4018-B6CB-058AB397226F} [2012/07/10 18:51:08 | 000,003,940 | ---- | M] () -- C:\Windows\system32\tasks\User_Feed_Synchronization-{A65AEF0B-B822-4C24-B3BE-67EE9605EB86} [2012/05/10 10:07:14 | 000,003,150 | ---- | M] () -- C:\Windows\system32\tasks\{066D67B3-8FF6-40F2-AE4C-FCD397779332} [2011/12/26 23:35:47 | 000,003,168 | ---- | M] () -- C:\Windows\system32\tasks\{6A6C8641-9252-4A7B-AD0E-22E5CD41E78F} [2009/12/30 18:08:43 | 000,003,188 | ---- | M] () -- C:\Windows\system32\tasks\{9314AEE8-62B5-46E1-9371-CEBBD1505854} [2011/12/19 19:39:42 | 000,003,208 | ---- | M] () -- C:\Windows\system32\tasks\{953E484D-EA99-46B4-A95B-80A40D9FD657} [2011/12/26 23:02:13 | 000,003,212 | ---- | M] () -- C:\Windows\system32\tasks\{9A51833A-65CA-4472-81F6-7A8B7C220054} [2009/06/23 22:33:02 | 000,003,056 | ---- | M] () -- C:\Windows\system32\tasks\{A951A895-488A-4F20-95BB-2FD4A1404939} < %systemroot%\Fonts\*.exe > < %systemroot%\*. /mp /s > < MD5 for: EXPLORER.EXE > [2008/10/29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe [2008/10/29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe [2008/10/30 04:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\ERDNT\cache\explorer.exe [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe [2008/10/28 03:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe [2008/04/29 16:42:08 | 000,090,624 | ---- | M] () MD5=FBB39A4487E11F64DCFFD36AEC2D2216 -- C:\Program Files\CheckPoint\ZAForceField\Heuristics\explorer.exe [2008/01/21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe < MD5 for: MRESP50.SYS > [2011/05/26 16:03:50 | 000,020,096 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) MD5=07C02C892E8E1A72D6BF35004F0E9C5E -- C:\Program Files\Common Files\Motive\MRESP50.sys < MD5 for: REGEDIT.EXE > [2008/01/21 03:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\ERDNT\cache\regedit.exe [2008/01/21 03:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\regedit.exe [2008/01/21 03:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_f42eb564dbd8a697\regedit.exe < MD5 for: SVCHOST.EXE > [2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\ERDNT\cache\svchost.exe [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\System32\svchost.exe [2008/01/21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe [2008/07/01 14:17:12 | 000,090,624 | ---- | M] () MD5=FBB39A4487E11F64DCFFD36AEC2D2216 -- C:\Program Files\CheckPoint\ZAForceField\Heuristics\svchost.exe < MD5 for: USERINIT.EXE > [2008/01/21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\ERDNT\cache\userinit.exe [2008/01/21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe [2008/01/21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe < MD5 for: WINLOGON.EXE > [2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2009/04/11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\ERDNT\cache\winlogon.exe [2009/04/11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009/04/11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2008/01/21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe [2008/07/01 14:17:12 | 000,090,624 | ---- | M] () MD5=FBB39A4487E11F64DCFFD36AEC2D2216 -- C:\Program Files\CheckPoint\ZAForceField\Heuristics\winlogon.exe < C:\Windows\assembly\tmp\U\*.* /s > < %Temp%\smtmp\1\*.* > < %Temp%\smtmp\2\*.* > < %Temp%\smtmp\3\*.* > < %Temp%\smtmp\4\*.* > < type c:\diskreport.txt /c > Microsoft DiskPart version 6.0.6002 Copyright (C) 1999-2007 Microsoft Corporation. On computer: EAMONNS Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- Volume 0 D DVD-ROM 0 B No Media Volume 1 C OS NTFS Partition 586 GB Healthy System Volume 2 I Removable 0 B No Media Volume 3 E Removable 0 B No Media Volume 4 F Removable 0 B No Media Volume 5 G Removable 0 B No Media Volume 6 H Removable 0 B No Media ========== Alternate Data Streams ========== @Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:07BF512B @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:0B4227B4 @Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:A8ADE5D8 @Alternate Data Stream - 1077 bytes -> C:\Users\currys\Documents\Reply to thread 'Internet Options in Control Panel missing'.eml:OECustomProperty @Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP  FC5A2B2@Alternate Data Stream - 1005 bytes -> C:\Users\currys\Desktop\Argos - Thank you for your order number 201549843.eml:OECustomProperty < End of report > |
10-Jul-2012, 04:50 PM
#12 | |||||||
| Okay, looks like you have quite a lot there that is not needed, so lets get rid of those Firstly, can you uninstall these via AddRemove Programs: Conduit Engine Game Booster 3 Smart Defrag 2 ZoneAlarm Security Toolbar ------ Then, can you do the following: Run OTL
__________________ Just go with the flow, like a twig on the shoulders of a mighty stream MVP in Consumer Security |
11-Jul-2012, 06:38 PM
#13 | ||||||
| All processes killed ========== OTL ========== No active process named gbtray.exe was found! Error: No service named WMService was found to stop! Service\Driver key WMService not found. Error: No service named SBSDWSCService was found to stop! Service\Driver key SBSDWSCService not found. File C:\Program Files\Spybot not found. Error: No service named PLFlash DeviceIoControl Service was found to stop! Service\Driver key PLFlash DeviceIoControl Service not found. Error: No service named odserv was found to stop! Service\Driver key odserv not found. Error: No service named NMIndexingService was found to stop! Service\Driver key NMIndexingService not found. Error: No service named Nero BackItUp Scheduler 3 was found to stop! Service\Driver key Nero BackItUp Scheduler 3 not found. Error: No service named iPod Service was found to stop! Service\Driver key iPod Service not found. Error: No service named IBUpdaterService was found to stop! Service\Driver key IBUpdaterService not found. Error: No service named Apple Mobile Device was found to stop! Service\Driver key Apple Mobile Device not found. Error: No service named vsdatant7 was found to stop! Service\Driver key vsdatant7 not found. Error: No service named NwlnkFwd was found to stop! Service\Driver key NwlnkFwd not found. Error: No service named NwlnkFlt was found to stop! Service\Driver key NwlnkFlt not found. Error: No service named MRENDIS5 was found to stop! Service\Driver key MRENDIS5 not found. Error: No service named MREMPR5 was found to stop! Service\Driver key MREMPR5 not found. Error: No service named IpInIp was found to stop! Service\Driver key IpInIp not found. Error: No service named cpuz134 was found to stop! Service\Driver key cpuz134 not found. Error: No service named catchme was found to stop! Service\Driver key catchme not found. File C:\Users\currys\AppData\Local\Temp\catchme.sys not found. Error: No service named SmartDefragDriver was found to stop! Service\Driver key SmartDefragDriver not found. File C:\Windows\System32\drivers\SmartDefragDriver.sys not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{91da5e8a-3318-4f8c-b67e-5964de3ab546} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91da5e8a-3318-4f8c-b67e-5964de3ab546}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Registry key HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Internet Explorer\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70D46D94-BF1E-45ED-B567-48701376298E}\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Internet Explorer\SearchScopes\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}\ not found. Prefs.js: "MyStart Search" removed from browser.search.defaultenginename Prefs.js: "WiseConvert Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "WiseConvert Customized Web Search" removed from browser.search.selectedEngine Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=2&q=" removed from keyword.URL Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/ShockwavePlayer\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@java.com/JavaPlugin\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=\ not found. Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=8\ not found. Folder C:\Users\currys\AppData\Roaming\mozilla\Firefox\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\ not found. Folder C:\Users\currys\AppData\Roaming\mozilla\Firefox\Profiles\fwvafgml.default\e xtensions\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1}\ not found. File C:\Users\currys\AppData\Roaming\Mozilla\Firefox\Profiles\fwvafgml.default\s earchplugins\conduit.xml not found. File C:\Users\currys\AppData\Roaming\Mozilla\Firefox\Profiles\fwvafgml.default\s earchplugins\MyStart Search.xml not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}\ not found. File C:\Program Files\Check Point Software Technologies LTD\zonealarm\1.5.23.8\bh\zonealarm.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{a0e8bc7d-6959-40b6-8e05-204d9768ad6e}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a0e8bc7d-6959-40b6-8e05-204d9768ad6e}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}\ not found. File C:\Program Files\Check Point Software Technologies LTD\zonealarm\1.5.23.8\zonealarmTlbr.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found. Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Registry key HKEY_USERS\S-1-5-21-118059262-2797764304-1290977041-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Google Sidewiki...\ not found. Starting removal of ActiveX control {0972B098-DEE9-4279-AC7E-4BAAA029102D} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0972B098-DEE9-4279-AC7E-4BAAA029102D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0972B098-DEE9-4279-AC7E-4BAAA029102D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{0972B098-DEE9-4279-AC7E-4BAAA029102D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0972B098-DEE9-4279-AC7E-4BAAA029102D}\ not found. Starting removal of ActiveX control {1E54D648-B804-468d-BC78-4AFFED8E262F} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ not found. Starting removal of ActiveX control {233C1507-6A77-46A4-9443-F871F945D258} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{233C1507-6A77-46A4-9443-F871F945D258}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{233C1507-6A77-46A4-9443-F871F945D258}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{233C1507-6A77-46A4-9443-F871F945D258}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{233C1507-6A77-46A4-9443-F871F945D258}\ not found. Starting removal of ActiveX control {74DBCB52-F298-4110-951D-AD2FF67BC8AB} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{74DBCB52-F298-4110-951D-AD2FF67BC8AB}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74DBCB52-F298-4110-951D-AD2FF67BC8AB}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{74DBCB52-F298-4110-951D-AD2FF67BC8AB}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74DBCB52-F298-4110-951D-AD2FF67BC8AB}\ not found. Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Starting removal of ActiveX control {BEA7310D-06C4-4339-A784-DC3804819809} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BEA7310D-06C4-4339-A784-DC3804819809}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BEA7310D-06C4-4339-A784-DC3804819809}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{BEA7310D-06C4-4339-A784-DC3804819809}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BEA7310D-06C4-4339-A784-DC3804819809}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\avgsecuritytoolbar\ not found. File Protocol\Handler\avgsecuritytoolbar - No CLSID value found not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\base64\ not found. File Protocol\Handler\base64 - No CLSID value found not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\chrome\ not found. File Protocol\Handler\chrome - No CLSID value found not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-itss\ not found. File Protocol\Handler\ms-itss - No CLSID value found not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\prox\ not found. File Protocol\Handler\prox - No CLSID value found not found. File/Folder C:\Windows\System32\*.tmp not found. File/Folder C:\Windows\*.tmp not found. File C:\Windows\System32\SmartDefragBootTime.exe not found. File C:\Windows\System32\drivers\SmartDefragDriver.sys not found. Folder C:\Users\currys\AppData\Roaming\IObit\ not found. Folder C:\Users\Default\AppData\Roaming\IObit\ not found. Folder C:\Users\Default User\AppData\Roaming\IObit\ not found. Folder C:\Users\UpdatusUser\AppData\Roaming\IObit\ not found. File C:\Windows\system32\tasks\Game_Booster_Startup not found. Unable to delete ADS C:\ProgramData\TEMP:07BF512B . Unable to delete ADS C:\ProgramData\TEMP:430C6D84 . Unable to delete ADS C:\ProgramData\TEMP:0B4227B4 . Unable to delete ADS C:\ProgramData\TEMP:A8ADE5D8 . Unable to delete ADS C:\ProgramData\TEMP FC5A2B2 .========== FILES ========== < ipconfig /flushdns /c > Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Users\currys\Downloads\cmd.bat deleted successfully. C:\Users\currys\Downloads\cmd.txt deleted successfully. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: All Users User: currys ->Temp folder emptied: 1050496 bytes ->Temporary Internet Files folder emptied: 1439217 bytes ->Java cache emptied: 1 bytes ->FireFox cache emptied: 59824564 bytes ->Apple Safari cache emptied: 0 bytes ->Flash cache emptied: 56967 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 56475 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 27915180 bytes RecycleBin emptied: 1146246 bytes Total Files Cleaned = 87.00 mb [EMPTYJAVA] User: All Users User: currys ->Java cache emptied: 0 bytes User: Default User: Default User User: Public User: UpdatusUser Total Java Files Cleaned = 0.00 mb [EMPTYFLASH] User: All Users User: currys ->Flash cache emptied: 0 bytes User: Default ->Flash cache emptied: 0 bytes User: Default User ->Flash cache emptied: 0 bytes User: Public User: UpdatusUser ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0.00 mb Unable to start System Restore Service. Error code -2146959355 OTL by OldTimer - Version 3.2.53.1 log created on 07112012_220830 Files\Folders moved on Reboot... C:\Users\currys\AppData\Local\Temp\~DF6D18.tmp moved successfully. C:\Windows\temp\ZLT02723.TMP moved successfully. PendingFileRenameOperations files... File C:\Users\currys\AppData\Local\Temp\~DF6D18.tmp not found! File C:\Windows\temp\ZLT02723.TMP not found! Registry entries deleted on Reboot... Eddie can't find conduit engine in add/remove any ideas? |
12-Jul-2012, 05:50 PM
#14 | |||||||
| Its okay about the Conduit Engine, it may have been removed after uninstalling the others  Please download SystemLook from one of the links below and save it to your Desktop. Download Mirror #1 Download Mirror #2
__________________ Just go with the flow, like a twig on the shoulders of a mighty stream MVP in Consumer Security |
Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.
If you're not already familiar with forums, watch our Welcome Guide to get started.
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
