Login | Live Chat & Podcast at 1:00PM Eastern on Sunday! |
 Search | |
| |
07-Sep-2010, 08:11 PM
#1 | |||||
| Help please (hijackthis and dds logs) |
| |
12-Sep-2010, 10:20 AM
#5 | |||||
| Hello and welcome to the forums! My name is SweetTech, it's a pleasure to meet you.  I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread. If you have already received help elsewhere please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:
Please download MBRCheck.exe to your Desktop. Run the application. If no infection is found, it will produce a report on the desktop. Post that report in your next reply. If an infection is found, you will be presented with the following dialog: Quote:
NEXT: OTL Custom Scan Please download OTL to your Desktop, if you have not done so already.
__________________ Please Note: Unless notified in advance, any thread that has not been replied to within 3 days will be removed from my Subscribed Threads list. |
13-Sep-2010, 04:32 PM
#7 | |||||
| OTL logfile created on: 9/13/2010 2:04:30 PM - Run 1 OTL by OldTimer - Version 3.2.12.0 Folder = C:\Users\Katherine\Documents 64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 6.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 50.00% Memory free 6.00 Gb Paging File | 4.00 Gb Available in Paging File | 60.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 687.31 Gb Total Space | 134.68 Gb Free Space | 19.60% Space Free | Partition Type: NTFS Drive D: | 11.32 Gb Total Space | 1.52 Gb Free Space | 13.38% Space Free | Partition Type: NTFS Drive E: | 4.60 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: SUPER-PC Current User Name: Katherine Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 90 Days Output = Minimal Quick Scan ========== Processes (SafeList) ========== PRC - C:\Users\Katherine\Documents\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation) PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) PRC - C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) PRC - C:\Program Files (x86)\DNA\btdna.exe (BitTorrent, Inc.) PRC - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Software Informer\softinfo.exe (Informer Technologies, Inc.) PRC - C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) PRC - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) PRC - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) PRC - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe () PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.) PRC - C:\Windows\SysWOW64\mmrtkrnl.exe (AlcaTech) PRC - C:\Program Files\Logitech\SetPoint\LU\LogitechUpdate.exe (Logitech, Inc.) PRC - C:\Program Files\Logitech\SetPoint\LU\LuLnchr.exe (Logitech, Inc.) PRC - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.) PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\Program Files (x86)\Portrait Displays\HP My Display\dthtml.exe (Portrait Displays, Inc) PRC - C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe () PRC - c:\hp\HPEZBTN\HPBtnSrv.exe () PRC - C:\hp\support\hpsysdrv.exe (Hewlett-Packard Company) PRC - C:\Program Files (x86)\Portrait Displays\Pivot Software\Floater.exe () PRC - C:\Program Files (x86)\Portrait Displays\Pivot Software\wpCtrl.exe () ========== Modules (SafeList) ========== MOD - C:\Users\Katherine\Documents\OTL.exe (OldTimer Tools) MOD - C:\Program Files\Alwil Software\Avast5\snxPlugins.dll (AVAST Software) MOD - C:\Windows\SysWOW64\wintrust.dll (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_no ne_d08d7da0442a985d\msvcr80.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\WMVCORE.DLL (Microsoft Corporation) MOD - C:\Program Files\Logitech\SetPoint\x86\GameHook.dll (Logitech, Inc.) MOD - C:\Program Files\Logitech\SetPoint\x86\lgscroll.dll (Logitech, Inc.) MOD - C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.1 8175_none_9e7bbe54c9c04bca\GdiPlus.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\PortableDeviceApi.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\WindowsCodecs.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\msshsq.dll (Microsoft Corporation) MOD - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\wpdshext.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\PortableDeviceTypes.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\audiodev.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\WMASF.DLL (Microsoft Corporation) MOD - C:\Windows\SysWOW64\ntshrui.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\duser.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\cscapi.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\actxprxy.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\ntlanman.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\msi.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\rsaenh.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\SLC.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\SysWOW64\networkexplorer.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\imagehlp.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\thumbcache.dll (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll (Microsoft Corporation) MOD - C:\Program Files (x86)\Portrait Displays\Pivot Software\Winphook.dll () MOD - C:\Windows\SysWOW64\linkinfo.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\davclnt.dll (Microsoft Corporation) MOD - C:\Windows\SysWOW64\drprov.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV:64bit: - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV:64bit: - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV:64bit: - (!SASCORE) -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com) SRV:64bit: - (wlidsvc) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.) SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.) SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV:64bit: - (XAudioService) -- C:\Windows\SysNative\DRIVERS\xaudio64.exe () SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (SeaPort) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) SRV - (fsssvc) -- C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation) SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.) SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.) SRV - (IAANTMON) Intel(R) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (DTSRVC) -- C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe () SRV - (HPBtnSrv) -- c:\hp\HPEZBTN\HPBtnSrv.exe () ========== Driver Services (SafeList) ========== DRV:64bit: - (NwlnkFwd) -- C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys File not found DRV:64bit: - (NwlnkFlt) -- C:\Windows\SysNative\DRIVERS\nwlnkflt.sys File not found DRV:64bit: - (IpInIp) -- C:\Windows\SysNative\DRIVERS\ipinip.sys File not found DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys () DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\Drivers\usbaapl64.sys () DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\Drivers\PxHlpa64.sys () DRV:64bit: - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:64bit: - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\DRIVERS\fssfltr.sys () DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys () DRV:64bit: - (LMouKE) -- C:\Windows\SysNative\DRIVERS\LMouKE.Sys () DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\DRIVERS\LMouFilt.Sys () DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\DRIVERS\LHidFilt.Sys () DRV:64bit: - (L8042mou) -- C:\Windows\SysNative\DRIVERS\L8042mou.Sys () DRV:64bit: - (L8042Kbd) -- C:\Windows\SysNative\DRIVERS\L8042Kbd.sys () DRV:64bit: - (sptd) -- C:\Windows\SysNative\Drivers\sptd.sys () DRV:64bit: - (CAXHWBS2) -- C:\Windows\SysNative\DRIVERS\CAXHWBS2.sys () DRV:64bit: - (winachsf) -- C:\Windows\SysNative\DRIVERS\CAX_CNXT.sys () DRV:64bit: - (HSF_DP) -- C:\Windows\SysNative\DRIVERS\CAX_DP.sys () DRV:64bit: - (netr28x) -- C:\Windows\SysNative\DRIVERS\netr28x.sys () DRV:64bit: - (HCW85BDA) -- C:\Windows\SysNative\drivers\HCW85BDA.sys () DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\DRIVERS\ManyCam_x64.sys () DRV:64bit: - (RTL8169) -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys () DRV:64bit: - (xnacc) -- C:\Windows\SysNative\DRIVERS\xnacc.sys () DRV:64bit: - (StillCam) -- C:\Windows\SysNative\DRIVERS\serscan.sys () DRV:64bit: - (XAudio) -- C:\Windows\SysNative\DRIVERS\xaudio64.sys () DRV:64bit: - (xusb21) -- C:\Windows\SysNative\DRIVERS\xusb21.sys () DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iastor.sys () DRV:64bit: - (PdiPorts) -- C:\Windows\SysNative\DRIVERS\PdiPorts.sys () DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\Wbem\ntfs.mof () DRV:64bit: - (mdmxsdk) -- C:\Windows\SysNative\DRIVERS\mdmxsdk.sys () DRV - (X4HSX32) -- C:\Program Files (x86)\GameTap\bin\Release\X4HSX32.sys (Exent Technologies Ltd.) DRV - (adfs) -- C:\Windows\SysWow64\drivers\adfs.sys (Adobe Systems, Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cndt IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cndt IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/...ch/search.html IE - HKLM\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cndt IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://de.ask.com?o=16081&l=dis IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local ========== FireFox ========== FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Eng7 Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Ask.com" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "www.google.com" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.1 FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8 FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10 FF - prefs.js..extensions.enabledItems: support@easygifanimator-toolbar.com:1.0 FF - prefs.js..extensions.enabledItems: {582195F5-92E7-40a0-A127-DB71295901D7}:0.6 FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6 FF - prefs.js..extensions.enabledItems: {7378B8C2-FC38-41b8-A8C9-875D1F5B0A24}:5.2.4.8 FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.11.2 FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.2.20100119091315 FF - prefs.js..network.proxy.type: 4 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.9\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/09/10 21:46:38 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.9\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/09/09 23:15:28 | 000,000,000 | ---D | M] [2008/08/18 09:51:28 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\mozilla\Extensions [2010/09/12 22:25:33 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions [2009/10/21 19:28:06 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2010/04/28 11:13:12 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010/02/17 22:54:13 | 000,000,000 | ---D | M] (Gmail Manager) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{582195F5-92E7-40a0-A127-DB71295901D7} [2010/02/17 22:54:13 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2010/03/27 12:01:03 | 000,000,000 | ---D | M] (ImageShack® Toolbar) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{7378B8C2-FC38-41b8-A8C9-875D1F5B0A24} [2009/06/30 22:35:06 | 000,000,000 | ---D | M] (IE Tab) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} [2010/07/31 16:48:58 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010/07/10 05:14:46 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010/07/15 06:02:37 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} [2010/07/01 15:39:56 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8} [2010/04/12 17:51:46 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Katherine\AppData\Roaming\mozilla\Firefox\Profiles\p91xafd2.defaul t\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010/07/13 17:49:56 | 000,002,393 | ---- | M] () -- C:\Users\Katherine\AppData\Roaming\Mozilla\FireFox\Profiles\p91xafd2.defaul t\searchplugins\askcom.xml [2010/03/16 11:33:24 | 000,000,929 | ---- | M] () -- C:\Users\Katherine\AppData\Roaming\Mozilla\FireFox\Profiles\p91xafd2.defaul t\searchplugins\conduit.xml [2009/07/02 06:36:56 | 000,001,196 | ---- | M] () -- C:\Users\Katherine\AppData\Roaming\Mozilla\FireFox\Profiles\p91xafd2.defaul t\searchplugins\winamp-search.xml [2010/09/04 22:48:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions [2008/09/04 02:11:24 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npbittorrent.dll O1 HOSTS File: ([2010/09/05 11:11:20 | 000,417,861 | R--- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 14420 more lines... O2:64bit: - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found. O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found. O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found. O2 - BHO: (Softonic-Eng7 Toolbar) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (Easy Gif Animator Toolbar Helper) - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files (x86)\Easy Gif Animator Extension\v3.3.0.2\EasyGifAnimator_Toolbar.dll () O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found. O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Easy Gif Animator Toolbar) - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files (x86)\Easy Gif Animator Extension\v3.3.0.2\EasyGifAnimator_Toolbar.dll () O3 - HKLM\..\Toolbar: (Softonic-Eng7 Toolbar) - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Easy Gif Animator Toolbar) - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files (x86)\Easy Gif Animator Extension\v3.3.0.2\EasyGifAnimator_Toolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (Softonic-Eng7 Toolbar) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O4:64bit: - HKLM..\Run: [HP Health Check Scheduler] File not found O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [DT HPW] C:\Program Files (x86)\Portrait Displays\HP My Display\DTHtml.exe (Portrait Displays, Inc) O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe () O4 - HKLM..\Run: [PivotSoftware] C:\Program Files (x86)\Portrait Displays\Pivot Software\wpctrl.exe () O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) O4 - HKLM..\Run: [Realtime Audio Engine] C:\Windows\SysWow64\mmrtkrnl.exe (AlcaTech) O4 - HKLM..\Run: [SunJavaUpdateReg] C:\Windows\SysWow64\jureg.exe (Sun Microsystems, Inc.) O4 - HKCU..\Run: [BitTorrent DNA] C:\Program Files (x86)\DNA\btdna.exe (BitTorrent, Inc.) O4 - HKCU..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EA Link\Core.exe (Electronic Arts) O4 - HKCU..\Run: [fsm] File not found O4 - HKCU..\Run: [Software Informer] C:\Program Files (x86)\Software Informer\softinfo.exe (Informer Technologies, Inc.) O4 - HKCU..\Run: [Steam] c:\program files (x86)\steam\steam.exe (Valve Corporation) O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8:64bit: - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 85.216.127.130 82.212.63.122 O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\horizon_1920x1200.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\horizon_1920x1200.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010/04/20 22:37:17 | 000,054,544 | R--- | M] (Electronic Arts) - E:\Autorun.exe -- [ UDF ] O32 - AutoRun File - [2010/03/27 06:03:00 | 000,000,049 | R--- | M] () - E:\Autorun.inf -- [ UDF ] O33 - MountPoints2\{0bbd7f4a-2e5c-11dd-894b-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{0bbd7f4a-2e5c-11dd-894b-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe -- [2010/04/20 22:37:17 | 000,054,544 | R--- | M] (Electronic Arts) O33 - MountPoints2\J\Shell - "" = AutoRun O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\Autorun.exe -- File not found O33 - MountPoints2\K\Shell - "" = AutoRun O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\Autoplay.exe -- File not found O33 - MountPoints2\L\Shell - "" = AutoRun O33 - MountPoints2\L\Shell\AutoRun\command - "" = L:\Setup.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm () Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lhacm - C:\Windows\SysWow64\lhacm.acm (Microsoft Corporation) Drivers32: msacm.vorbis - C:\Windows\SysWow64\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/) Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.) Drivers32: vidc.i420 - C:\Windows\SysWow64\i420vfw.dll (www.helixcommunity.org) Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com) Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com) Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll () Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 90 Days ========== [2010/09/13 14:02:25 | 000,576,000 | ---- | C] (OldTimer Tools) -- C:\Users\Katherine\Documents\OTL.exe [2010/09/11 12:08:00 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2010/09/10 14:00:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Amazon [2010/09/09 23:57:01 | 000,000,000 | ---D | C] -- C:\Users\Katherine\Documents\Adobe [2010/09/08 16:06:24 | 000,167,592 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2010/09/08 16:06:24 | 000,038,848 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr [2010/09/07 21:18:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro [2010/09/07 21:17:52 | 000,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Users\Katherine\Documents\HijackThisInstaller.exe [2010/09/07 16:25:04 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010/09/07 16:25:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010/09/06 03:00:58 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\%APPDATA% [2010/09/05 00:52:42 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core [2010/09/04 23:20:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2010/09/04 23:20:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy [2010/09/04 23:19:31 | 016,409,960 | ---- | C] (Safer Networking Limited ) -- C:\Users\Katherine\Documents\spybotsd162.exe [2010/09/04 23:09:01 | 000,000,000 | ---D | C] -- C:\Users\Katherine\AppData\Roaming\SUPERAntiSpyware.com [2010/09/04 23:09:01 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2010/09/04 23:08:57 | 000,000,000 | ---D | C] -- C:\ProgramData\!SASCORE [2010/09/04 23:08:55 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2010/09/04 22:53:56 | 009,333,808 | ---- | C] (SUPERAntiSpyware.com) -- C:\Users\Katherine\Documents\SUPERAntiSpyware.exe [2010/09/04 22:45:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner [2010/09/04 22:45:35 | 003,427,248 | ---- | C] (Piriform Ltd) -- C:\Users\Katherine\Documents\ccsetup235.exe [2010/09/04 12:48:38 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive [2010/09/04 12:18:25 | 000,975,512 | ---- | C] (Blizzard Entertainment, Inc.) -- C:\Users\Katherine\Documents\Repair.exe [2010/08/29 15:08:29 | 000,000,000 | ---D | C] -- C:\Users\Katherine\AppData\Local\Sunbelt Software [2010/08/29 15:06:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft [2010/08/28 20:16:53 | 002,146,504 | ---- | C] (AVG Technologies) -- C:\Users\Katherine\Documents\avg_iswt_stb_all_9_117_free.exe [2010/08/28 11:56:58 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2010/08/28 11:56:55 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2010/08/28 11:56:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2010/08/28 11:56:55 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} [2010/08/28 11:55:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010/08/28 11:55:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010/08/28 11:52:48 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2010/08/28 10:30:35 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Katherine\Documents\mbam-setup.exe [2010/08/28 10:13:48 | 109,280,088 | ---- | C] (Kaspersky Lab) -- C:\Users\Katherine\Documents\kav2011_11.0.1.400en_us.exe [2010/07/24 05:43:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ventrilo [2010/07/23 04:35:49 | 025,548,264 | ---- | C] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_1.14.11.007001_from_1.12.70.006001.exe [2010/07/23 04:15:30 | 022,103,176 | ---- | C] (Electronic Arts, Inc.) -- C:\Users\Katherine\Documents\eadm-installer.exe [2010/07/23 03:53:41 | 041,995,184 | ---- | C] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_4.2.32.007001_from_4.0.87.006001.exe [2010/07/23 03:52:40 | 049,910,760 | ---- | C] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_4.2.32.007017_from_4.0.87.006017.exe [2010/07/23 03:38:23 | 028,075,408 | ---- | C] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_1.14.11.007002_from_1.12.70.006002.exe [2010/07/22 06:50:16 | 000,000,000 | ---D | C] -- C:\Users\Katherine\AppData\Roaming\Malwarebytes [2010/07/22 06:49:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010/07/22 04:27:54 | 000,000,000 | ---D | C] -- C:\Users\Katherine\AppData\Local\skeyyhbfr [2010/07/01 15:56:20 | 012,760,056 | ---- | C] (Electronic Arts ) -- C:\Users\Katherine\Documents\ead-installer.exe [2010/07/01 15:56:20 | 002,131,336 | ---- | C] (Ask.com ) -- C:\Users\Katherine\Documents\askToolbarInstaller-1.6.6.0.exe [2010/06/25 06:19:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VentSrv [2010/06/19 23:42:58 | 000,000,000 | ---D | C] -- C:\Users\Katherine\Documents\World of Warcraft [2008/09/03 07:20:00 | 001,224,704 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbserv.dll [2008/09/03 07:20:00 | 000,991,232 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbusb1.dll [2008/09/03 07:20:00 | 000,696,320 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbhbn3.dll [2008/09/03 07:20:00 | 000,684,032 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbcomc.dll [2008/09/03 07:20:00 | 000,643,072 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbpmui.dll [2008/09/03 07:20:00 | 000,585,728 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdblmpm.dll [2008/09/03 07:20:00 | 000,421,888 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbcomm.dll [2008/09/03 07:20:00 | 000,413,696 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbinpa.dll [2008/09/03 07:20:00 | 000,397,312 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbiesc.dll [2008/09/03 07:20:00 | 000,163,840 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbprox.dll [2008/09/03 07:20:00 | 000,094,208 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdbpplc.dll [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Users\Katherine\Documents\*.tmp files -> C:\Users\Katherine\Documents\*.tmp -> ] ========== Files - Modified Within 90 Days ========== [2010/09/13 14:04:41 | 071,041,024 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat [2010/09/13 14:02:24 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Katherine\Documents\OTL.exe [2010/09/13 13:59:28 | 000,080,384 | ---- | M] () -- C:\Users\Katherine\Documents\MBRCheck.exe [2010/09/13 13:38:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010/09/13 12:53:33 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010/09/13 12:53:33 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010/09/13 06:55:38 | 000,035,275 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010/09/13 06:55:38 | 000,035,275 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010/09/13 06:54:30 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010/09/13 06:53:36 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010/09/13 06:53:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010/09/13 06:53:31 | 268,435,456 | -HS- | M] () -- C:\Windows\SysNative\temppf.sys [2010/09/13 06:53:13 | 2146,721,791 | -HS- | M] () -- C:\hiberfil.sys [2010/09/13 00:00:17 | 000,524,288 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{c51dc64c-7ec5-11df-bd8d-001fc68a4053}.TMContainer00000000000000000001.regtrans-ms [2010/09/13 00:00:17 | 000,065,536 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{c51dc64c-7ec5-11df-bd8d-001fc68a4053}.TM.blf [2010/09/13 00:00:12 | 003,690,237 | -H-- | M] () -- C:\Users\Katherine\AppData\Local\IconCache.db [2010/09/12 23:22:14 | 000,002,215 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010/09/12 23:19:43 | 000,007,729 | -HS- | M] () -- C:\Users\Katherine\Documents\Folder.jpg [2010/09/12 23:19:43 | 000,002,458 | -HS- | M] () -- C:\Users\Katherine\Documents\AlbumArtSmall.jpg [2010/09/12 20:57:15 | 003,797,191 | ---- | M] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (PJ-R Bootleg Remix).mp3 [2010/09/12 20:42:40 | 003,291,878 | ---- | M] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (Clubwaver Remix).mp3 [2010/09/12 20:40:13 | 008,339,584 | ---- | M] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (Clubwaver Remix) [ www.DjKaniQ.pl ].mp3 [2010/09/12 19:50:20 | 004,806,656 | ---- | M] () -- C:\Users\Katherine\Documents\Ke$ha - Tik Tok Instrumental (Regular).mp3 [2010/09/12 19:09:22 | 011,167,938 | ---- | M] () -- C:\Users\Katherine\Documents\Ke$ha - Tik Tok (D3Y Remix Edit).mp3 [2010/09/12 15:47:14 | 000,005,142 | ---- | M] () -- C:\Users\Katherine\AppData\Roaming\wklnhst.dat [2010/09/11 13:20:07 | 003,304,105 | ---- | M] () -- C:\Users\Katherine\Documents\The Corrs - Breathless.mp3 [2010/09/11 13:20:02 | 006,830,466 | ---- | M] () -- C:\Users\Katherine\Documents\not afraid.mp3 [2010/09/11 13:19:51 | 010,671,885 | ---- | M] () -- C:\Users\Katherine\Documents\01_Love_the_Way_You_Lie_(Clean).mp3 [2010/09/11 13:19:10 | 000,010,955 | -HS- | M] () -- C:\Users\Katherine\Documents\AlbumArt_{13FADCDF-EA64-483B-9523-32D918DF8E53}_Large.jpg [2010/09/11 13:18:55 | 000,002,754 | -HS- | M] () -- C:\Users\Katherine\Documents\AlbumArt_{13FADCDF-EA64-483B-9523-32D918DF8E53}_Small.jpg [2010/09/11 13:15:03 | 000,007,368 | -HS- | M] () -- C:\Users\Katherine\Documents\AlbumArt_{7333A340-E097-42B3-A035-2747625D5F62}_Large.jpg [2010/09/11 13:14:53 | 000,002,119 | -HS- | M] () -- C:\Users\Katherine\Documents\AlbumArt_{7333A340-E097-42B3-A035-2747625D5F62}_Small.jpg [2010/09/11 13:14:28 | 000,008,999 | -HS- | M] () -- C:\Users\Katherine\Documents\AlbumArt_{5D6524EE-006A-41C4-9E59-A1805504B904}_Large.jpg [2010/09/11 13:14:28 | 000,002,382 | -HS- | M] () -- C:\Users\Katherine\Documents\AlbumArt_{5D6524EE-006A-41C4-9E59-A1805504B904}_Small.jpg [2010/09/11 13:13:34 | 003,940,480 | ---- | M] () -- C:\Users\Katherine\Documents\Sydney Forest - I'm gonna fly.mp3 [2010/09/11 13:13:14 | 003,940,480 | ---- | M] () -- C:\Users\Katherine\Documents\im gonna fly.mp3 [2010/09/10 16:58:16 | 005,937,142 | ---- | M] () -- C:\Users\Katherine\Documents\Selena Gomez &.mp3 [2010/09/10 16:32:36 | 005,939,649 | ---- | M] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (trance remix) [HQ].mp3 [2010/09/10 16:12:45 | 005,272,181 | ---- | M] () -- C:\Users\Katherine\Documents\DJ KTMan - Naturally.mp3 [2010/09/10 15:08:57 | 000,176,128 | ---- | M] () -- C:\Users\Katherine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/09/10 14:00:22 | 001,008,936 | ---- | M] () -- C:\Users\Katherine\Documents\AmazonMP3Installer.exe [2010/09/09 22:45:15 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2010/09/09 21:21:58 | 007,678,778 | ---- | M] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (DJ Kimbo's Trance Radio Remix) (Radio Remix Made By n!nO).mp3 [2010/09/09 21:03:11 | 004,933,215 | ---- | M] () -- C:\Users\Katherine\Documents\Selena Gomez Naturally (Instrumental).mp3 [2010/09/09 20:44:41 | 003,242,609 | ---- | M] () -- C:\Users\Katherine\Documents\Selena_Gomez_-_Naturally_(Official_Acapella).mp3 [2010/09/09 20:40:35 | 004,054,236 | ---- | M] () -- C:\Users\Katherine\Documents\Naturally official instrumental 2010.mp3 [2010/09/09 18:10:24 | 003,194,945 | ---- | M] () -- C:\Users\Katherine\Documents\warlock.mp3 [2010/09/08 16:07:13 | 000,001,798 | ---- | M] () -- C:\Users\Public\Desktop\avast! Pro Antivirus.lnk [2010/09/08 16:03:24 | 052,923,144 | ---- | M] () -- C:\Users\Katherine\Documents\setup_av_pro.exe [2010/09/08 15:06:07 | 000,095,320 | ---- | M] () -- C:\Users\Katherine\AppData\Local\GDIPFONTCACHEV1.DAT [2010/09/08 11:09:01 | 003,200,032 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010/09/07 21:27:26 | 000,293,376 | ---- | M] () -- C:\Users\Katherine\Documents\gkrmld0o.exe [2010/09/07 21:21:56 | 000,525,824 | ---- | M] () -- C:\Users\Katherine\Documents\dds.scr [2010/09/07 21:17:34 | 000,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Users\Katherine\Documents\HijackThisInstaller.exe [2010/09/07 17:12:17 | 000,038,848 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr [2010/09/07 17:11:54 | 000,167,592 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2010/09/07 16:54:10 | 000,472,656 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSnx.sys [2010/09/07 16:52:29 | 000,051,280 | ---- | M] () -- C:\Windows\SysNative\drivers\aswTdi.sys [2010/09/07 16:52:09 | 000,121,936 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSP.sys [2010/09/07 16:47:49 | 000,028,752 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRdr.sys [2010/09/07 16:47:33 | 000,061,008 | ---- | M] () -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2010/09/07 16:47:10 | 000,020,048 | ---- | M] () -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2010/09/07 16:25:06 | 000,000,810 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/09/07 15:43:52 | 000,177,208 | ---- | M] () -- C:\Users\Katherine\Documents\GearScore3.1.17.zip [2010/09/07 15:43:18 | 000,035,698 | ---- | M] () -- C:\Users\Katherine\Documents\MoveAnything.zip [2010/09/07 15:43:04 | 000,246,754 | ---- | M] () -- C:\Users\Katherine\Documents\Bartender4-4.4.2.zip [2010/09/07 15:41:57 | 000,700,112 | ---- | M] () -- C:\Users\Katherine\Documents\XPerl-3.0.9.zip [2010/09/06 19:35:15 | 000,022,016 | ---- | M] () -- C:\Users\Katherine\Documents\Dps.doc [2010/09/05 21:22:34 | 000,630,676 | ---- | M] () -- C:\Users\Katherine\Documents\breathless3.mp3 [2010/09/05 17:36:40 | 009,508,399 | ---- | M] () -- C:\Users\Katherine\Documents\1280423780_nelly___just_a_dream___hotnewhiphop _com.mp3 [2010/09/05 11:11:20 | 000,417,861 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2010/09/05 11:03:11 | 000,417,861 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20100905-111120.backup [2010/09/04 23:20:29 | 000,001,083 | ---- | M] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2010/09/04 23:20:29 | 000,001,065 | ---- | M] () -- C:\Users\Katherine\Contacts\Desktop\Spybot - Search & Destroy.lnk [2010/09/04 23:18:50 | 016,409,960 | ---- | M] (Safer Networking Limited ) -- C:\Users\Katherine\Documents\spybotsd162.exe [2010/09/04 23:08:57 | 000,001,758 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2010/09/04 22:56:12 | 009,333,808 | ---- | M] (SUPERAntiSpyware.com) -- C:\Users\Katherine\Documents\SUPERAntiSpyware.exe [2010/09/04 22:45:42 | 000,000,814 | ---- | M] () -- C:\Users\Katherine\Contacts\Desktop\CCleaner.lnk [2010/09/04 22:45:31 | 003,427,248 | ---- | M] (Piriform Ltd) -- C:\Users\Katherine\Documents\ccsetup235.exe [2010/09/04 18:54:51 | 000,000,396 | ---- | M] () -- C:\Windows\tasks\Install_NSS.job [2010/09/04 12:46:31 | 000,000,240 | ---- | M] () -- C:\Windows\win.ini [2010/09/04 12:19:50 | 000,001,430 | ---- | M] () -- C:\Users\Katherine\Contacts\Desktop\DivX Movies.lnk [2010/09/04 12:19:36 | 000,000,909 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk [2010/08/31 18:05:04 | 000,005,238 | ---- | M] () -- C:\Windows\SysWow64\ealregsnapshot1.reg [2010/08/30 19:17:41 | 001,612,557 | ---- | M] () -- C:\Users\Katherine\Documents\TropicalBeach31.JPG [2010/08/30 19:16:47 | 000,407,184 | ---- | M] () -- C:\Users\Katherine\Documents\Tropical_Retreat.jpg [2010/08/30 19:11:39 | 000,651,512 | ---- | M] () -- C:\Users\Katherine\Documents\beach-wallpaper-01.jpg [2010/08/30 19:11:17 | 000,301,627 | ---- | M] () -- C:\Users\Katherine\Documents\afterglow,_hawaii.jpg [2010/08/30 19:08:57 | 000,769,512 | ---- | M] () -- C:\Users\Katherine\Documents\Beach-Scene.jpg [2010/08/29 18:33:50 | 000,000,000 | ---- | M] () -- C:\Users\Katherine\AppData\Local\prvlcl.dat [2010/08/29 15:46:32 | 000,790,054 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010/08/29 15:46:32 | 000,663,486 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010/08/29 15:46:32 | 000,128,906 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010/08/29 12:20:12 | 000,001,798 | ---- | M] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (5).lnk [2010/08/29 11:40:40 | 000,024,064 | ---- | M] () -- C:\Users\Katherine\Documents\11518041.doc [2010/08/29 11:39:06 | 000,001,798 | ---- | M] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (4).lnk [2010/08/29 10:41:29 | 000,001,798 | ---- | M] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (3).lnk [2010/08/29 10:41:23 | 000,001,798 | ---- | M] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2010/08/29 01:45:31 | 000,000,000 | ---- | M] () -- C:\Users\Katherine\mssefullinstall-amd64fre-en-us-vista-win7.exe [2010/08/28 20:58:46 | 000,001,977 | ---- | M] () -- C:\Users\Katherine\Contacts\Desktop\Windows Live Messenger .lnk [2010/08/28 20:16:49 | 002,146,504 | ---- | M] (AVG Technologies) -- C:\Users\Katherine\Documents\avg_iswt_stb_all_9_117_free.exe [2010/08/28 11:56:03 | 000,001,718 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010/08/28 11:47:41 | 000,000,000 | ---- | M] () -- C:\Users\Katherine\Documents\iTunesSetup.exe [2010/08/28 10:30:33 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Katherine\Documents\mbam-setup.exe [2010/08/28 10:13:59 | 109,280,088 | ---- | M] (Kaspersky Lab) -- C:\Users\Katherine\Documents\kav2011_11.0.1.400en_us.exe [2010/08/19 11:56:34 | 000,019,968 | ---- | M] () -- C:\Users\Katherine\Documents\sefsfsfsfsfesf.doc [2010/08/15 13:32:17 | 001,312,504 | ---- | M] () -- C:\Users\Katherine\Documents\ghrdgsgs.jpg [2010/08/15 13:25:38 | 001,052,000 | ---- | M] () -- C:\Users\Katherine\Documents\cszzczcz.jpg [2010/08/15 13:18:23 | 002,263,492 | ---- | M] () -- C:\Users\Katherine\Documents\dadawdadwadawda.jpg [2010/08/15 13:15:35 | 002,674,254 | ---- | M] () -- C:\Users\Katherine\Documents\esfsfsfsfe.jpg [2010/08/15 01:47:54 | 000,000,000 | ---- | M] () -- C:\Users\Katherine\Documents\preview.mp3 [2010/08/11 02:23:10 | 000,027,124 | ---- | M] () -- C:\Users\Katherine\Documents\alphaville-forever_young.mid [2010/08/11 01:02:19 | 008,238,753 | ---- | M] () -- C:\Users\Katherine\Documents\6hdubelong2me.mp3 [2010/08/11 01:01:58 | 008,011,233 | ---- | M] () -- C:\Users\Katherine\Documents\18hddontrust.mp3 [2010/08/11 01:01:29 | 004,467,597 | ---- | M] () -- C:\Users\Katherine\Documents\jay-z_ft._mr._hudson_-_forever_young_piano_by_ray_mak.mp3 [2010/08/11 00:59:48 | 008,181,504 | ---- | M] () -- C:\Users\Katherine\Documents\50hdnaturally.mp3 [2010/08/05 19:45:04 | 000,355,189 | ---- | M] () -- C:\Users\Katherine\Documents\Recount-v3.3h_release.zip [2010/07/29 17:13:52 | 000,019,968 | ---- | M] () -- C:\Users\Katherine\Documents\the land before time.doc [2010/07/29 15:06:44 | 004,481,162 | ---- | M] () -- C:\Users\Katherine\Documents\Kiki's Delivery Service - I'm Gonna Fly.mp3 [2010/07/24 05:43:12 | 000,000,268 | ---- | M] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2010/07/23 04:35:50 | 025,548,264 | ---- | M] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_1.14.11.007001_from_1.12.70.006001.exe [2010/07/23 04:30:10 | 028,075,408 | ---- | M] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_1.14.11.007002_from_1.12.70.006002.exe [2010/07/23 04:16:37 | 000,002,094 | ---- | M] () -- C:\Users\Katherine\Documents\EA Download Manager.lnk [2010/07/23 04:15:22 | 022,103,176 | ---- | M] (Electronic Arts, Inc.) -- C:\Users\Katherine\Documents\eadm-installer.exe [2010/07/23 03:53:45 | 041,995,184 | ---- | M] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_4.2.32.007001_from_4.0.87.006001.exe [2010/07/23 03:52:46 | 049,910,760 | ---- | M] (Acresso Software Inc.) -- C:\Users\Katherine\Documents\Sims3_4.2.32.007017_from_4.0.87.006017.exe [2010/07/22 06:05:14 | 000,000,680 | ---- | M] () -- C:\Users\Katherine\AppData\Local\d3d9caps.dat [2010/07/22 05:36:55 | 000,000,732 | ---- | M] () -- C:\Users\Katherine\AppData\Local\d3d9caps64.dat [2010/07/22 04:44:23 | 000,000,000 | ---- | M] () -- C:\Users\Katherine\Documents\All I Do Is Win (Remix).mp3 [2010/07/22 04:27:45 | 000,000,794 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20100905-110311.backup [2010/07/22 04:27:43 | 000,000,150 | ---- | M] () -- C:\zrpt.xml [2010/07/22 02:46:36 | 004,549,600 | ---- | M] () -- C:\Users\Katherine\Documents\all i do is win.mp3 [2010/07/19 12:08:28 | 000,045,132 | ---- | M] () -- C:\Users\Katherine\Documents\CazyAntoHair80_thumbf.jpg [2010/07/18 20:40:14 | 000,001,729 | ---- | M] () -- C:\Users\Katherine\Documents\McAfee Security Scan Plus.lnk [2010/07/18 05:07:32 | 004,768,910 | ---- | M] () -- C:\Users\Katherine\Documents\The Fugees-Killing me softl.mp3 [2010/07/18 03:48:04 | 045,255,764 | ---- | M] () -- C:\Users\Katherine\Documents\ForeverYoung.wav [2010/07/18 03:37:32 | 005,003,574 | ---- | M] () -- C:\Users\Katherine\Documents\ForeverYoung.mp3 [2010/07/17 05:04:39 | 000,000,357 | ---- | M] () -- C:\Users\Katherine\Documents\shakira - waka waka.mp3 [2010/07/14 00:37:57 | 000,028,672 | ---- | M] () -- C:\Users\Katherine\Documents\wow faction talk.doc [2010/07/13 21:55:40 | 000,000,162 | -H-- | M] () -- C:\Users\Katherine\Documents\~$w faction talk.doc [2010/07/13 17:13:15 | 000,044,008 | ---- | M] () -- C:\Users\Katherine\Documents\PeggyHair26_3.jpg [2010/07/09 14:19:49 | 000,001,430 | ---- | M] () -- C:\Users\Katherine\Documents\DivX Movies.lnk [2010/07/09 14:19:18 | 000,000,909 | ---- | M] () -- C:\Users\Katherine\Documents\DivX Plus Player.lnk [2010/07/09 02:02:52 | 000,110,526 | ---- | M] () -- C:\Users\Katherine\Documents\GearScore.rar [2010/07/08 02:35:30 | 028,582,572 | ---- | M] () -- C:\Users\Katherine\Documents\05. WeAre Young - 30H!3.wav [2010/07/08 02:30:57 | 029,756,012 | ---- | M] () -- C:\Users\Katherine\Documents\12. Strrets Of Gold - 30H!3.wav [2010/07/08 00:48:38 | 000,022,016 | ---- | M] () -- C:\Users\Katherine\Documents\À Á Â Ã Ä Å à á â ã ä å Æ æ È É Ê Ë ë è ê é Ì Í Î Ï ì í î ï Ñ ñ Ò Ó Ö Õ Ô Ø ò ó ô õ ö ø ð Ù Ü Ú Û ù ú û ü Ý Ÿ ý ÿ Š š ž Ž Ç ç Ð ß Æ.doc [2010/07/06 23:03:43 | 000,029,696 | ---- | M] () -- C:\Users\Katherine\Documents\dinosaurlol.doc [2010/07/06 13:58:19 | 000,000,949 | ---- | M] () -- C:\Users\Katherine\Documents\DivX Plus Converter.lnk [2010/07/02 00:03:05 | 030,291,480 | ---- | M] () -- C:\Users\Katherine\Documents\Don't Trust Me - 30H!3.wav [2010/07/01 23:57:25 | 030,292,940 | ---- | M] () -- C:\Users\Katherine\Documents\15. Don't Trust Me - 30H!3.wav [2010/07/01 21:37:44 | 001,998,294 | ---- | M] () -- C:\Users\Katherine\Documents\fd38375000268a564794f234.mp3 [2010/07/01 15:57:56 | 000,001,979 | ---- | M] () -- C:\Users\Katherine\Documents\EA Link.lnk [2010/07/01 15:56:34 | 002,131,336 | ---- | M] (Ask.com ) -- C:\Users\Katherine\Documents\askToolbarInstaller-1.6.6.0.exe [2010/07/01 15:56:28 | 012,760,056 | ---- | M] (Electronic Arts ) -- C:\Users\Katherine\Documents\ead-installer.exe [2010/07/01 15:56:14 | 000,260,400 | ---- | M] () -- C:\Users\Katherine\Documents\SoftonicDownloader62174.exe [2010/06/29 23:04:31 | 000,002,029 | ---- | M] () -- C:\Users\Public\Desktop\The Sims™ 3 Ambitions.lnk [2010/06/29 22:54:06 | 000,002,073 | ---- | M] () -- C:\Users\Katherine\Documents\The Sims™ 3 World Adventures.lnk [2010/06/26 08:28:41 | 000,243,712 | ---- | M] () -- C:\Windows\SysNative\occache.dll [2010/06/26 08:26:43 | 000,706,048 | ---- | M] () -- C:\Windows\SysNative\msfeeds.dll [2010/06/26 08:26:05 | 001,538,560 | ---- | M] () -- C:\Windows\SysNative\inetcpl.cpl [2010/06/26 08:25:54 | 002,335,744 | ---- | M] () -- C:\Windows\SysNative\iertutil.dll [2010/06/26 08:25:54 | 000,219,136 | ---- | M] () -- C:\Windows\SysNative\ieui.dll [2010/06/26 08:25:54 | 000,132,096 | ---- | M] () -- C:\Windows\SysNative\iesysprep.dll [2010/06/26 08:25:54 | 000,077,312 | ---- | M] () -- C:\Windows\SysNative\iesetup.dll [2010/06/26 08:25:53 | 000,252,416 | ---- | M] () -- C:\Windows\SysNative\iepeers.dll [2010/06/26 08:25:53 | 000,072,192 | ---- | M] () -- C:\Windows\SysNative\iernonce.dll [2010/06/26 06:47:47 | 000,162,816 | ---- | M] () -- C:\Windows\SysNative\ieUnatt.exe [2010/06/26 06:47:29 | 000,070,656 | ---- | M] () -- C:\Windows\SysNative\ie4uinit.exe [2010/06/26 06:46:54 | 000,012,288 | ---- | M] () -- C:\Windows\SysNative\msfeedssync.exe [2010/06/23 14:50:16 | 000,524,288 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{c51dc64c-7ec5-11df-bd8d-001fc68a4053}.TMContainer00000000000000000002.regtrans-ms [2010/06/22 03:26:17 | 000,524,288 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{44a65ddc-7c58-11df-8870-001fc68a4053}.TMContainer00000000000000000001.regtrans-ms [2010/06/22 03:26:17 | 000,065,536 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{44a65ddc-7c58-11df-8870-001fc68a4053}.TM.blf [2010/06/20 12:41:24 | 000,524,288 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{44a65ddc-7c58-11df-8870-001fc68a4053}.TMContainer00000000000000000002.regtrans-ms [2010/06/19 11:01:34 | 000,524,288 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{3048248e-7b81-11df-8848-001fc68a4053}.TMContainer00000000000000000002.regtrans-ms [2010/06/19 11:01:34 | 000,524,288 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{3048248e-7b81-11df-8848-001fc68a4053}.TMContainer00000000000000000001.regtrans-ms [2010/06/19 11:01:34 | 000,065,536 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{3048248e-7b81-11df-8848-001fc68a4053}.TM.blf [2010/06/18 19:17:49 | 000,050,688 | ---- | M] () -- C:\Windows\SysNative\rtutils.dll [2010/06/18 15:38:13 | 000,524,288 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{6752e66e-5bf7-11df-8efd-001fc68a4053}.TMContainer00000000000000000001.regtrans-ms [2010/06/18 15:38:13 | 000,065,536 | -HS- | M] () -- C:\Users\Katherine\ntuser.dat{6752e66e-5bf7-11df-8efd-001fc68a4053}.TM.blf [2010/06/15 16:10:46 | 000,975,512 | ---- | M] (Blizzard Entertainment, Inc.) -- C:\Users\Katherine\Documents\Repair.exe [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Users\Katherine\Documents\*.tmp files -> C:\Users\Katherine\Documents\*.tmp -> ] ========== Files Created - No Company Name ========== [2010/09/13 13:59:37 | 000,080,384 | ---- | C] () -- C:\Users\Katherine\Documents\MBRCheck.exe [2010/09/13 06:53:31 | 268,435,456 | -HS- | C] () -- C:\Windows\SysNative\temppf.sys [2010/09/12 20:57:22 | 003,797,191 | ---- | C] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (PJ-R Bootleg Remix).mp3 [2010/09/12 20:42:39 | 003,291,878 | ---- | C] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (Clubwaver Remix).mp3 [2010/09/12 20:40:13 | 008,339,584 | ---- | C] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (Clubwaver Remix) [ www.DjKaniQ.pl ].mp3 [2010/09/12 19:49:07 | 004,806,656 | ---- | C] () -- C:\Users\Katherine\Documents\Ke$ha - Tik Tok Instrumental (Regular).mp3 [2010/09/12 19:06:39 | 011,167,938 | ---- | C] () -- C:\Users\Katherine\Documents\Ke$ha - Tik Tok (D3Y Remix Edit).mp3 [2010/09/11 13:19:24 | 000,010,955 | -HS- | C] () -- C:\Users\Katherine\Documents\AlbumArt_{13FADCDF-EA64-483B-9523-32D918DF8E53}_Large.jpg [2010/09/11 13:19:24 | 000,002,754 | -HS- | C] () -- C:\Users\Katherine\Documents\AlbumArt_{13FADCDF-EA64-483B-9523-32D918DF8E53}_Small.jpg [2010/09/11 13:15:15 | 000,007,368 | -HS- | C] () -- C:\Users\Katherine\Documents\AlbumArt_{7333A340-E097-42B3-A035-2747625D5F62}_Large.jpg [2010/09/11 13:15:15 | 000,002,119 | -HS- | C] () -- C:\Users\Katherine\Documents\AlbumArt_{7333A340-E097-42B3-A035-2747625D5F62}_Small.jpg [2010/09/11 13:14:28 | 000,008,999 | -HS- | C] () -- C:\Users\Katherine\Documents\AlbumArt_{5D6524EE-006A-41C4-9E59-A1805504B904}_Large.jpg [2010/09/11 13:14:28 | 000,002,382 | -HS- | C] () -- C:\Users\Katherine\Documents\AlbumArt_{5D6524EE-006A-41C4-9E59-A1805504B904}_Small.jpg [2010/09/10 16:58:16 | 005,937,142 | ---- | C] () -- C:\Users\Katherine\Documents\Selena Gomez &.mp3 [2010/09/10 16:32:35 | 005,939,649 | ---- | C] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (trance remix) [HQ].mp3 [2010/09/10 16:12:47 | 005,272,181 | ---- | C] () -- C:\Users\Katherine\Documents\DJ KTMan - Naturally.mp3 [2010/09/10 14:00:28 | 001,008,936 | ---- | C] () -- C:\Users\Katherine\Documents\AmazonMP3Installer.exe [2010/09/09 21:20:02 | 007,678,778 | ---- | C] () -- C:\Users\Katherine\Documents\Selena Gomez - Naturally (DJ Kimbo's Trance Radio Remix) (Radio Remix Made By n!nO).mp3 [2010/09/09 21:01:54 | 004,933,215 | ---- | C] () -- C:\Users\Katherine\Documents\Selena Gomez Naturally (Instrumental).mp3 [2010/09/09 20:44:42 | 003,242,609 | ---- | C] () -- C:\Users\Katherine\Documents\Selena_Gomez_-_Naturally_(Official_Acapella).mp3 [2010/09/09 20:40:37 | 004,054,236 | ---- | C] () -- C:\Users\Katherine\Documents\Naturally official instrumental 2010.mp3 [2010/09/09 18:10:20 | 003,194,945 | ---- | C] () -- C:\Users\Katherine\Documents\warlock.mp3 [2010/09/08 16:07:13 | 000,001,798 | ---- | C] () -- C:\Users\Public\Desktop\avast! Pro Antivirus.lnk [2010/09/08 16:07:12 | 000,121,936 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSP.sys [2010/09/08 16:07:12 | 000,020,048 | ---- | C] () -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2010/09/08 16:07:10 | 000,472,656 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSnx.sys [2010/09/08 16:07:10 | 000,028,752 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRdr.sys [2010/09/08 16:07:09 | 000,051,280 | ---- | C] () -- C:\Windows\SysNative\drivers\aswTdi.sys [2010/09/08 16:06:27 | 000,427,430 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI682F.txt [2010/09/08 16:06:26 | 000,012,258 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI682F.txt [2010/09/08 16:03:20 | 052,923,144 | ---- | C] () -- C:\Users\Katherine\Documents\setup_av_pro.exe [2010/09/07 21:27:29 | 000,293,376 | ---- | C] () -- C:\Users\Katherine\Documents\gkrmld0o.exe [2010/09/07 21:21:57 | 000,525,824 | ---- | C] () -- C:\Users\Katherine\Documents\dds.scr [2010/09/07 16:25:06 | 000,000,810 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/09/07 15:43:15 | 000,035,698 | ---- | C] () -- C:\Users\Katherine\Documents\MoveAnything.zip [2010/09/07 15:42:57 | 000,246,754 | ---- | C] () -- C:\Users\Katherine\Documents\Bartender4-4.4.2.zip [2010/09/07 15:41:46 | 000,700,112 | ---- | C] () -- C:\Users\Katherine\Documents\XPerl-3.0.9.zip [2010/09/06 19:35:14 | 000,022,016 | ---- | C] () -- C:\Users\Katherine\Documents\Dps.doc [2010/09/05 21:27:19 | 003,304,105 | ---- | C] () -- C:\Users\Katherine\Documents\The Corrs - Breathless.mp3 [2010/09/05 21:22:37 | 000,630,676 | ---- | C] () -- C:\Users\Katherine\Documents\breathless3.mp3 [2010/09/05 17:36:08 | 009,508,399 | ---- | C] () -- C:\Users\Katherine\Documents\1280423780_nelly___just_a_dream___hotnewhiphop _com.mp3 [2010/09/04 23:20:29 | 000,001,083 | ---- | C] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2010/09/04 23:20:29 | 000,001,065 | ---- | C] () -- C:\Users\Katherine\Contacts\Desktop\Spybot - Search & Destroy.lnk [2010/09/04 23:08:57 | 000,001,758 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2010/09/04 22:45:42 | 000,000,814 | ---- | C] () -- C:\Users\Katherine\Contacts\Desktop\CCleaner.lnk [2010/09/04 19:09:57 | 2146,721,791 | -HS- | C] () -- C:\hiberfil.sys [2010/09/04 19:02:51 | 000,001,695 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk [2010/09/04 14:49:41 | 000,061,008 | ---- | C] () -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2010/09/04 14:49:37 | 000,001,824 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI74D6.txt [2010/09/04 14:49:35 | 000,012,056 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI74D6.txt [2010/09/04 14:43:15 | 000,001,832 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI6FF9.txt [2010/09/04 14:43:14 | 000,012,072 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI6FF9.txt [2010/09/04 12:19:50 | 000,001,430 | ---- | C] () -- C:\Users\Katherine\Contacts\Desktop\DivX Movies.lnk [2010/09/04 12:19:36 | 000,000,909 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk [2010/09/04 12:19:25 | 000,000,396 | ---- | C] () -- C:\Windows\tasks\Install_NSS.job [2010/09/03 10:46:38 | 000,337,284 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI6CC1.txt [2010/09/03 10:46:38 | 000,012,502 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI6CC1.txt [2010/08/30 19:19:02 | 000,336,616 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI3C63.txt [2010/08/30 19:19:01 | 000,011,418 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI3C63.txt [2010/08/30 19:17:40 | 001,612,557 | ---- | C] () -- C:\Users\Katherine\Documents\TropicalBeach31.JPG [2010/08/30 19:16:47 | 000,407,184 | ---- | C] () -- C:\Users\Katherine\Documents\Tropical_Retreat.jpg [2010/08/30 19:11:39 | 000,651,512 | ---- | C] () -- C:\Users\Katherine\Documents\beach-wallpaper-01.jpg [2010/08/30 19:11:17 | 000,301,627 | ---- | C] () -- C:\Users\Katherine\Documents\afterglow,_hawaii.jpg [2010/08/30 19:08:57 | 000,769,512 | ---- | C] () -- C:\Users\Katherine\Documents\Beach-Scene.jpg [2010/08/30 17:49:36 | 000,335,774 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI77F0.txt [2010/08/30 17:49:35 | 000,011,986 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI77F0.txt [2010/08/29 18:30:46 | 000,336,154 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI4950.txt [2010/08/29 18:30:45 | 000,012,002 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI4950.txt [2010/08/29 14:45:59 | 000,010,630 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI1D48.txt [2010/08/29 14:45:58 | 000,412,014 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI1D3E.txt [2010/08/29 14:45:56 | 000,012,106 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI1D3E.txt [2010/08/29 12:20:12 | 000,001,798 | ---- | C] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (5).lnk [2010/08/29 11:40:39 | 000,024,064 | ---- | C] () -- C:\Users\Katherine\Documents\11518041.doc [2010/08/29 11:39:06 | 000,001,798 | ---- | C] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (4).lnk [2010/08/29 10:41:29 | 000,001,798 | ---- | C] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (3).lnk [2010/08/29 10:41:23 | 000,001,798 | ---- | C] () -- C:\Users\Katherine\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2010/08/29 01:45:31 | 000,000,000 | ---- | C] () -- C:\Users\Katherine\mssefullinstall-amd64fre-en-us-vista-win7.exe [2010/08/28 20:58:46 | 000,001,977 | ---- | C] () -- C:\Users\Katherine\Contacts\Desktop\Windows Live Messenger .lnk [2010/08/28 11:57:26 | 000,002,215 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010/08/28 11:56:03 | 000,001,718 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010/08/28 11:47:41 | 000,000,000 | ---- | C] () -- C:\Users\Katherine\Documents\iTunesSetup.exe [2010/08/28 10:02:24 | 000,421,400 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI7617.txt [2010/08/28 10:02:23 | 000,012,290 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI7617.txt [2010/08/18 09:36:41 | 000,019,968 | ---- | C] () -- C:\Users\Katherine\Documents\sefsfsfsfsfesf.doc [2010/08/15 13:32:15 | 001,312,504 | ---- | C] () -- C:\Users\Katherine\Documents\ghrdgsgs.jpg [2010/08/15 13:15:33 | 002,674,254 | ---- | C] () -- C:\Users\Katherine\Documents\esfsfsfsfe.jpg [2010/08/15 13:13:04 | 001,052,000 | ---- | C] () -- C:\Users\Katherine\Documents\cszzczcz.jpg [2010/08/15 12:20:20 | 002,263,492 | ---- | C] () -- C:\Users\Katherine\Documents\dadawdadwadawda.jpg [2010/08/15 01:47:54 | 000,000,000 | ---- | C] () -- C:\Users\Katherine\Documents\preview.mp3 [2010/08/12 06:56:01 | 001,420,176 | ---- | C] () -- C:\Windows\SysNative\drivers\tcpip.sys [2010/08/12 06:55:58 | 000,462,848 | ---- | C] () -- C:\Windows\SysNative\drivers\srv.sys [2010/08/12 06:55:58 | 000,174,592 | ---- | C] () -- C:\Windows\SysNative\drivers\srv2.sys [2010/08/12 06:55:53 | 002,749,952 | ---- | C] () -- C:\Windows\SysNative\win32k.sys [2010/08/12 06:55:50 | 000,050,688 | ---- | C] () -- C:\Windows\SysNative\rtutils.dll [2010/08/12 06:55:47 | 004,690,832 | ---- | C] () -- C:\Windows\SysNative\ntoskrnl.exe [2010/08/12 06:55:36 | 009,250,816 | ---- | C] () -- C:\Windows\SysNative\mshtml.dll [2010/08/12 06:55:35 | 012,473,344 | ---- | C] () -- C:\Windows\SysNative\ieframe.dll [2010/08/12 06:55:34 | 002,335,744 | ---- | C] () -- C:\Windows\SysNative\iertutil.dll [2010/08/12 06:55:33 | 001,487,360 | ---- | C] () -- C:\Windows\SysNative\urlmon.dll [2010/08/12 06:55:33 | 001,147,904 | ---- | C] () -- C:\Windows\SysNative\wininet.dll [2010/08/12 06:55:33 | 000,706,048 | ---- | C] () -- C:\Windows\SysNative\msfeeds.dll [2010/08/12 06:55:33 | 000,459,776 | ---- | C] () -- C:\Windows\SysNative\iedkcs32.dll [2010/08/12 06:55:33 | 000,252,416 | ---- | C] () -- C:\Windows\SysNative\iepeers.dll [2010/08/12 06:55:33 | 000,243,712 | ---- | C] () -- C:\Windows\SysNative\occache.dll [2010/08/12 06:55:32 | 001,538,560 | ---- | C] () -- C:\Windows\SysNative\inetcpl.cpl [2010/08/12 06:55:32 | 001,062,912 | ---- | C] () -- C:\Windows\SysNative\mstime.dll [2010/08/12 06:55:32 | 000,219,136 | ---- | C] () -- C:\Windows\SysNative\ieui.dll [2010/08/12 06:55:32 | 000,162,816 | ---- | C] () -- C:\Windows\SysNative\ieUnatt.exe [2010/08/12 06:55:32 | 000,132,096 | ---- | C] () -- C:\Windows\SysNative\iesysprep.dll [2010/08/12 06:55:32 | 000,077,312 | ---- | C] () -- C:\Windows\SysNative\iesetup.dll [2010/08/12 06:55:32 | 000,072,192 | ---- | C] () -- C:\Windows\SysNative\iernonce.dll [2010/08/12 06:55:32 | 000,071,680 | ---- | C] () -- C:\Windows\SysNative\msfeedsbs.dll [2010/08/12 06:55:32 | 000,070,656 | ---- | C] () -- C:\Windows\SysNative\ie4uinit.exe [2010/08/12 06:55:32 | 000,031,744 | ---- | C] () -- C:\Windows\SysNative\jsproxy.dll [2010/08/12 06:55:32 | 000,012,288 | ---- | C] () -- C:\Windows\SysNative\msfeedssync.exe [2010/08/12 06:55:31 | 001,638,912 | ---- | C] () -- C:\Windows\SysNative\mshtml.tlb [2010/08/12 06:55:28 | 001,875,456 | ---- | C] () -- C:\Windows\SysNative\msxml3.dll [2010/08/12 06:55:27 | 000,343,040 | ---- | C] () -- C:\Windows\SysNative\schannel.dll [2010/08/11 04:39:04 | 010,671,885 | ---- | C] () -- C:\Users\Katherine\Documents\01_Love_the_Way_You_Lie_(Clean).mp3 [2010/08/11 04:32:39 | 006,830,466 | ---- | C] () -- C:\Users\Katherine\Documents\not afraid.mp3 [2010/08/11 02:23:12 | 000,027,124 | ---- | C] () -- C:\Users\Katherine\Documents\alphaville-forever_young.mid [2010/08/11 01:02:08 | 008,238,753 | ---- | C] () -- C:\Users\Katherine\Documents\6hdubelong2me.mp3 [2010/08/11 01:01:39 | 008,011,233 | ---- | C] () -- C:\Users\Katherine\Documents\18hddontrust.mp3 [2010/08/11 01:01:17 | 004,467,597 | ---- | C] () -- C:\Users\Katherine\Documents\jay-z_ft._mr._hudson_-_forever_young_piano_by_ray_mak.mp3 [2010/08/11 00:59:09 | 008,181,504 | ---- | C] () -- C:\Users\Katherine\Documents\50hdnaturally.mp3 [2010/08/05 19:45:07 | 000,355,189 | ---- | C] () -- C:\Users\Katherine\Documents\Recount-v3.3h_release.zip [2010/08/03 11:39:41 | 012,898,304 | ---- | C] () -- C:\Windows\SysNative\shell32.dll [2010/07/31 16:06:02 | 000,568,540 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI7D32.txt [2010/07/31 16:01:28 | 000,015,380 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI7D32.txt [2010/07/29 17:13:52 | 000,019,968 | ---- | C] () -- C:\Users\Katherine\Documents\the land before time.doc [2010/07/29 15:40:38 | 003,940,480 | ---- | C] () -- C:\Users\Katherine\Documents\Sydney Forest - I'm gonna fly.mp3 [2010/07/29 15:12:20 | 003,940,480 | ---- | C] () -- C:\Users\Katherine\Documents\im gonna fly.mp3 [2010/07/29 15:05:42 | 004,481,162 | ---- | C] () -- C:\Users\Katherine\Documents\Kiki's Delivery Service - I'm Gonna Fly.mp3 [2010/07/24 05:43:08 | 000,000,268 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2010/07/23 04:16:37 | 000,002,094 | ---- | C] () -- C:\Users\Katherine\Documents\EA Download Manager.lnk [2010/07/23 04:08:04 | 000,005,238 | ---- | C] () -- C:\Windows\SysWow64\ealregsnapshot1.reg [2010/07/23 03:05:13 | 000,027,453 | ---- | C] () -- C:\Users\Katherine\Documents\peggyzone-sims3-F-FAhair083.jpg [2010/07/23 03:05:13 | 000,020,025 | ---- | C] () -- C:\Users\Katherine\Documents\peggyzone-sims3-F-FAhair052.JPG [2010/07/23 03:04:23 | 000,068,790 | ---- | C] () -- C:\Users\Katherine\Documents\peggyzone-sims3-hair1-1-b.jpg [2010/07/23 03:04:19 | 000,023,084 | ---- | C] () -- C:\Users\Katherine\Documents\peggyzone-sims3-F-FAhair041.jpg [2010/07/23 03:04:18 | 000,076,508 | ---- | C] () -- C:\Users\Katherine\Documents\installed_PlumpLip.jpg [2010/07/23 03:04:18 | 000,071,940 | ---- | C] () -- C:\Users\Katherine\Documents\lip02_tech02.jpg [2010/07/23 03:04:17 | 000,045,132 | ---- | C] () -- C:\Users\Katherine\Documents\CazyAntoHair80_thumbf.jpg [2010/07/23 03:04:16 | 000,044,008 | ---- | C] () -- C:\Users\Katherine\Documents\PeggyHair26_3.jpg [2010/07/23 03:04:04 | 000,002,752 | ---- | C] () -- C:\Users\Katherine\Documents\XM Sims 3 Read Me (2).htm [2010/07/22 06:49:55 | 000,024,664 | ---- | C] () -- C:\Windows\SysNative\drivers\mbam.sys [2010/07/22 06:04:15 | 000,000,680 | ---- | C] () -- C:\Users\Katherine\AppData\Local\d3d9caps.dat [2010/07/22 04:44:23 | 000,000,000 | ---- | C] () -- C:\Users\Katherine\Documents\All I Do Is Win (Remix).mp3 [2010/07/22 04:27:43 | 000,000,150 | ---- | C] () -- C:\zrpt.xml [2010/07/22 02:45:59 | 004,549,600 | ---- | C] () -- C:\Users\Katherine\Documents\all i do is win.mp3 [2010/07/18 05:07:11 | 004,768,910 | ---- | C] () -- C:\Users\Katherine\Documents\The Fugees-Killing me softl.mp3 [2010/07/18 03:48:02 | 045,255,764 | ---- | C] () -- C:\Users\Katherine\Documents\ForeverYoung.wav [2010/07/18 03:37:15 | 005,003,574 | ---- | C] () -- C:\Users\Katherine\Documents\ForeverYoung.mp3 [2010/07/17 05:04:38 | 000,000,357 | ---- | C] () -- C:\Users\Katherine\Documents\shakira - waka waka.mp3 [2010/07/15 14:21:52 | 000,001,729 | ---- | C] () -- C:\Users\Katherine\Documents\McAfee Security Scan Plus.lnk [2010/07/13 21:55:40 | 000,028,672 | ---- | C] () -- C:\Users\Katherine\Documents\wow faction talk.doc [2010/07/13 21:55:40 | 000,000,162 | -H-- | C] () -- C:\Users\Katherine\Documents\~$w faction talk.doc [2010/07/09 02:02:52 | 000,110,526 | ---- | C] () -- C:\Users\Katherine\Documents\GearScore.rar [2010/07/09 01:02:14 | 000,177,208 | ---- | C] () -- C:\Users\Katherine\Documents\GearScore3.1.17.zip [2010/07/08 02:35:26 | 028,582,572 | ---- | C] () -- C:\Users\Katherine\Documents\05. WeAre Young - 30H!3.wav [2010/07/08 02:30:52 | 029,756,012 | ---- | C] () -- C:\Users\Katherine\Documents\12. Strrets Of Gold - 30H!3.wav [2010/07/07 15:00:46 | 000,336,798 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI7B89.txt [2010/07/07 15:00:45 | 000,012,018 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI7B89.txt [2010/07/06 21:51:05 | 000,029,696 | ---- | C] () -- C:\Users\Katherine\Documents\dinosaurlol.doc [2010/07/06 13:59:20 | 000,001,430 | ---- | C] () -- C:\Users\Katherine\Documents\DivX Movies.lnk [2010/07/06 13:58:26 | 000,000,909 | ---- | C] () -- C:\Users\Katherine\Documents\DivX Plus Player.lnk [2010/07/06 13:58:19 | 000,000,949 | ---- | C] () -- C:\Users\Katherine\Documents\DivX Plus Converter.lnk [2010/07/02 00:03:03 | 030,291,480 | ---- | C] () -- C:\Users\Katherine\Documents\Don't Trust Me - 30H!3.wav [2010/07/01 23:57:22 | 030,292,940 | ---- | C] () -- C:\Users\Katherine\Documents\15. Don't Trust Me - 30H!3.wav [2010/07/01 21:36:09 | 001,998,294 | ---- | C] () -- C:\Users\Katherine\Documents\fd38375000268a564794f234.mp3 [2010/07/01 15:57:56 | 000,001,979 | ---- | C] () -- C:\Users\Katherine\Documents\EA Link.lnk [2010/07/01 15:56:14 | 000,260,400 | ---- | C] () -- C:\Users\Katherine\Documents\SoftonicDownloader62174.exe [2010/06/29 23:15:28 | 000,000,886 | ---- | C] () -- C:\Users\Katherine\Documents\Resource.cfg [2010/06/29 23:14:48 | 000,214,774 | ---- | C] () -- C:\Users\Katherine\Documents\Longer Parties Mod.pdf [2010/06/29 23:14:37 | 000,001,196 | ---- | C] () -- C:\Users\Katherine\Documents\Sky_PartlyCloudySea.ini [2010/06/29 23:14:37 | 000,001,196 | ---- | C] () -- C:\Users\Katherine\Documents\Sky_ClearSea.ini [2010/06/29 23:14:37 | 000,000,975 | ---- | C] () -- C:\Users\Katherine\Documents\Sky_OvercastSea.ini [2010/06/29 23:14:37 | 000,000,973 | ---- | C] () -- C:\Users\Katherine\Documents\Sky_StormySea.ini [2010/06/29 23:14:37 | 000,000,917 | ---- | C] () -- C:\Users\Katherine\Documents\Sky_CustomSea.ini [2010/06/29 23:14:37 | 000,000,135 | ---- | C] () -- C:\Users\Katherine\Documents\Water Color Tutorial.url [2010/06/29 23:14:36 | 000,030,373 | ---- | C] () -- C:\Users\Katherine\Documents\ReadMe.doc [2010/06/29 23:14:36 | 000,027,648 | ---- | C] () -- C:\Users\Katherine\Documents\ReadMe.xls [2010/06/29 23:13:11 | 000,002,752 | ---- | C] () -- C:\Users\Katherine\Documents\XM Sims 3 Read Me.htm [2010/06/29 23:04:31 | 000,002,029 | ---- | C] () -- C:\Users\Public\Desktop\The Sims™ 3 Ambitions.lnk [2010/06/29 22:54:06 | 000,002,073 | ---- | C] () -- C:\Users\Katherine\Documents\The Sims™ 3 World Adventures.lnk [2010/06/24 03:04:12 | 000,227,328 | ---- | C] () -- C:\Windows\SysNative\mpg2splt.ax [2010/06/24 03:04:12 | 000,101,376 | ---- | C] () -- C:\Windows\SysNative\MSNP.ax [2010/06/24 03:04:10 | 000,375,808 | ---- | C] () -- C:\Windows\SysNative\psisdecd.dll [2010/06/24 03:04:09 | 000,558,592 | ---- | C] () -- C:\Windows\SysNative\EncDec.dll [2010/06/24 03:04:09 | 000,289,792 | ---- | C] () -- C:\Windows\SysNative\psisrndr.ax [2010/06/24 03:04:00 | 001,942,856 | ---- | C] () -- C:\Windows\SysNative\dfshim.dll [2010/06/24 03:04:00 | 000,444,752 | ---- | C] () -- C:\Windows\SysNative\mscoree.dll [2010/06/24 03:04:00 | 000,320,352 | ---- | C] () -- C:\Windows\SysNative\PresentationHost.exe [2010/06/24 03:04:00 | 000,109,912 | ---- | C] () -- C:\Windows\SysNative\PresentationHostProxy.dll [2010/06/24 03:04:00 | 000,048,960 | ---- | C] () -- C:\Windows\SysNative\netfxperf.dll [2010/06/23 22:16:44 | 000,032,256 | ---- | C] () -- C:\Windows\SysNative\Apphlpdm.dll [2010/06/23 22:16:43 | 004,240,384 | ---- | C] () -- C:\Windows\SysNative\GameUXLegacyGDFs.dll [2010/06/23 14:50:16 | 000,524,288 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{c51dc64c-7ec5-11df-bd8d-001fc68a4053}.TMContainer00000000000000000002.regtrans-ms [2010/06/23 14:50:16 | 000,524,288 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{c51dc64c-7ec5-11df-bd8d-001fc68a4053}.TMContainer00000000000000000001.regtrans-ms [2010/06/23 14:50:16 | 000,065,536 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{c51dc64c-7ec5-11df-bd8d-001fc68a4053}.TM.blf [2010/06/20 12:41:24 | 000,524,288 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{44a65ddc-7c58-11df-8870-001fc68a4053}.TMContainer00000000000000000002.regtrans-ms [2010/06/20 12:41:24 | 000,524,288 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{44a65ddc-7c58-11df-8870-001fc68a4053}.TMContainer00000000000000000001.regtrans-ms [2010/06/20 12:41:24 | 000,065,536 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{44a65ddc-7c58-11df-8870-001fc68a4053}.TM.blf [2010/06/19 11:01:34 | 000,524,288 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{3048248e-7b81-11df-8848-001fc68a4053}.TMContainer00000000000000000002.regtrans-ms [2010/06/19 11:01:34 | 000,524,288 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{3048248e-7b81-11df-8848-001fc68a4053}.TMContainer00000000000000000001.regtrans-ms [2010/06/19 11:01:34 | 000,065,536 | -HS- | C] () -- C:\Users\Katherine\ntuser.dat{3048248e-7b81-11df-8848-001fc68a4053}.TM.blf [2010/04/08 14:00:54 | 000,426,914 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistMSI55BF.txt [2010/04/08 14:00:53 | 000,016,062 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_vcredistUI55BF.txt [2010/04/02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2010/03/10 16:45:12 | 000,000,000 | ---- | C] () -- C:\Users\Katherine\AppData\Local\prvlcl.dat [2009/10/26 17:10:13 | 000,000,598 | ---- | C] () -- C:\Users\Katherine\AppData\Roaming\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml [2009/10/26 17:06:13 | 000,000,026 | ---- | C] () -- C:\Users\Katherine\AppData\Roaming\ClipExtractor-UpdatePerformed.txt [2009/10/07 17:39:45 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI [2009/08/30 17:02:16 | 000,000,600 | ---- | C] () -- C:\Windows\Quake.INI [2009/05/21 15:26:21 | 000,005,184 | ---- | C] () -- C:\ProgramData\N360BUOptions.ini [2009/05/19 17:41:17 | 000,035,275 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009/05/19 15:54:53 | 000,035,275 | ---- | C] () -- C:\ProgramData\nvModes.dat [2009/03/13 20:46:28 | 000,002,672 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2009/03/13 20:46:28 | 000,000,088 | RHS- | C] () -- C:\ProgramData\418A2EBD90.sys [2009/02/26 12:47:40 | 001,315,840 | ---- | C] () -- C:\Program Files (x86)\Zoo Tycoon 2 - Extinct Animals.msi [2009/02/11 20:01:32 | 000,000,732 | ---- | C] () -- C:\Users\Katherine\AppData\Local\d3d9caps64.dat [2009/01/18 03:24:51 | 000,000,089 | ---- | C] () -- C:\Windows\ulead32.ini [2009/01/02 19:30:22 | 000,002,304 | ---- | C] () -- C:\Windows\SysWow64\Machnm32.sys [2008/12/18 22:32:43 | 000,112,412 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_depcheckdotnetfx30.txt [2008/12/18 22:32:40 | 000,129,428 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_dotnetfx3install.txt [2008/12/18 22:32:40 | 000,008,208 | ---- | C] () -- C:\Users\Katherine\AppData\Local\uxeventlog.txt [2008/12/18 22:32:40 | 000,002,410 | ---- | C] () -- C:\Users\Katherine\AppData\Local\dd_dotnetfx3error.txt [2008/12/12 21:04:53 | 000,647,168 | ---- | C] () -- C:\Windows\SysWow64\sonicismdsp.dll [2008/12/12 21:02:11 | 000,038,905 | ---- | C] () -- C:\Windows\4ORM-DEMO-DX.ini [2008/12/05 18:50:11 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2008/11/06 18:37:32 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll [2008/11/02 15:26:32 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2008/10/07 10:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2008/10/07 10:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2008/09/27 13:45:39 | 002,463,976 | ---- | C] () -- C:\Windows\SysWow64\NPSWF32.dll [2008/09/03 07:20:00 | 000,385,024 | ---- | C] () -- C:\Windows\SysWow64\lxdbcomx.dll [2008/09/03 07:20:00 | 000,274,432 | ---- | C] () -- C:\Windows\SysWow64\lxdbinst.dll [2008/08/31 20:18:27 | 000,765,952 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2008/08/31 20:18:26 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2008/08/22 02:01:22 | 000,000,097 | ---- | C] () -- C:\Users\Katherine\AppData\Local\fusioncache.dat [2008/08/20 13:27:35 | 000,743,720 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2008/08/17 16:11:09 | 000,176,128 | ---- | C] () -- C:\Users\Katherine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/08/16 22:08:30 | 000,005,142 | ---- | C] () -- C:\Users\Katherine\AppData\Roaming\wklnhst.dat [2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2008/05/09 15:22:12 | 000,327,680 | ---- | C] () -- C:\Windows\SysWow64\pythoncom25.dll [2008/05/09 15:22:12 | 000,102,400 | ---- | C] () -- C:\Windows\SysWow64\pywintypes25.dll [2008/01/21 04:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2008/01/21 04:49:49 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2003/01/07 17:05:08 | 000,002,695 | ---- | C] () -- C:\Windows\SysWow64\OUTLPERF.INI [1999/07/07 02:00:00 | 000,000,006 | RHS- | C] () -- C:\ProgramData\D81EDBF9-D167-4011-B77D-211DF920EB80 ========== LOP Check ========== [2009/11/18 00:14:18 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\Acoustica [2009/03/08 16:24:55 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\AlcaTech [2010/03/09 18:56:12 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\DisplayTune [2010/09/13 14:06:07 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\DNA [2010/09/12 22:48:39 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\Electronic Arts [2010/04/04 03:44:17 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\GetRightToGo [2009/03/13 20:12:43 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\gtk-2.0 [2010/07/13 19:08:22 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\iCopyExpert [2009/06/20 04:42:51 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\ManyCam [2009/03/08 08:14:15 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\mioObjects [2008/12/12 21:14:49 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\Publish Providers [2010/01/09 03:49:30 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\SecondLife [2010/09/13 06:56:13 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\Software Informer [2008/12/12 21:13:40 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\Sony [2008/08/16 22:08:31 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\Template [2010/09/13 14:06:08 | 000,000,000 | ---D | M] -- C:\Users\Katherine\AppData\Roaming\uTorrent [2010/09/04 18:54:51 | 000,000,396 | ---- | M] () -- C:\Windows\Tasks\Install_NSS.job [2010/09/13 00:00:20 | 000,032,600 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* > [2010/08/30 11:01:54 | 000,001,408 | ---- | M] () -- C:\aaw7boot.log [2008/01/21 04:50:15 | 000,333,203 | RHS- | M] () -- C:\bootmgr [2008/05/09 16:13:01 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK [2009/08/13 10:38:29 | 000,000,698 | ---- | M] () -- C:\deltaStartup.log [2010/09/13 06:53:13 | 2146,721,791 | -HS- | M] () -- C:\hiberfil.sys [2008/09/03 07:28:09 | 000,000,200 | ---- | M] () -- C:\lxdb.log [2006/12/02 08:37:14 | 000,904,704 | ---- | M] (Microsoft Corporation) -- C:\msdia80.dll [2002/01/05 03:38:38 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\msvci70.dll [2009/05/12 22:24:57 | 000,000,000 | ---- | M] () -- C:\ntuser.dat [2009/05/12 22:24:57 | 000,000,000 | -H-- | M] () -- C:\ntuser.dat.LOG1 [2009/05/12 22:24:57 | 000,000,000 | -H-- | M] () -- C:\ntuser.dat.LOG2 [2009/09/12 08:49:16 | 000,000,000 | -HS- | M] () -- C:\pagefile.sys [2006/10/06 16:42:22 | 000,002,853 | ---- | M] () -- C:\pdiports64.inf [2009/01/02 22:44:26 | 000,000,173 | ---- | M] () -- C:\pdisdk.log [2009/01/02 22:43:41 | 000,000,184 | ---- | M] () -- C:\pivot.log [2010/07/22 06:49:23 | 000,000,485 | ---- | M] () -- C:\rkill.log [2008/09/01 20:48:17 | 000,000,268 | -H-- | M] () -- C:\sqmdata00.sqm [2008/09/01 20:48:17 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm [2010/03/09 19:34:55 | 001,294,336 | ---- | M] () -- C:\Zoo Tycoon 2 - African Adventure.msi [2010/02/28 19:15:47 | 001,144,320 | ---- | M] () -- C:\Zoo Tycoon 2 - Marine Mania.msi [2010/07/22 04:27:43 | 000,000,150 | ---- | M] () -- C:\zrpt.xml < %systemroot%\Fonts\*.com > [2006/11/02 17:06:41 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont [2006/11/02 17:06:41 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont [2006/11/02 17:06:41 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont [2006/11/02 17:06:41 | 000,030,808 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont < %systemroot%\Fonts\*.dll > < %systemroot%\Fonts\*.ini > [2006/09/18 23:35:48 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini < %systemroot%\Fonts\*.ini2 > < %systemroot%\Fonts\*.exe > < %systemroot%\system32\spool\prtprocs\w32x86\*.* > < %systemroot%\REPAIR\*.bak1 > < %systemroot%\REPAIR\*.ini > < %systemroot%\system32\*.jpg > < %systemroot%\*.jpg > < %systemroot%\*.png > < %systemroot%\*.scr > [2010/09/07 17:12:17 | 000,038,848 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr [2009/07/10 13:15:46 | 000,306,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] < %systemroot%\*._sy > < %APPDATA%\Adobe\Update\*.* > < %ALLUSERSPROFILE%\Favorites\*.* > < %APPDATA%\Microsoft\*.* > < %PROGRAMFILES%\*.* > [2008/01/21 05:21:59 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini [2009/02/26 12:47:41 | 001,315,840 | ---- | M] () -- C:\Program Files (x86)\Zoo Tycoon 2 - Extinct Animals.msi < %APPDATA%\Update\*.* > < %systemroot%\*. /mp /s > < %systemroot%\System32\config\*.sav > < %PROGRAMFILES%\bak. /s > < %systemroot%\system32\bak. /s > < %ALLUSERSPROFILE%\Start Menu\*.lnk /x > < %systemroot%\system32\config\systemprofile\*.dat /x > < %systemroot%\*.config > < %systemroot%\system32\*.db > < %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x > [2009/10/03 19:56:37 | 000,000,365 | -HS- | M] () -- C:\Users\Katherine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini < %USERPROFILE%\Desktop\*.exe > < %PROGRAMFILES%\Common Files\*.* > < %systemroot%\*.src > < %systemroot%\install\*.* > < %systemroot%\system32\DLL\*.* > < %systemroot%\system32\HelpFiles\*.* > < %systemroot%\system32\rundll\*.* > < %systemroot%\winn32\*.* > < %systemroot%\Java\*.* > < %systemroot%\system32\test\*.* > < %systemroot%\system32\Rundll32\*.* > < %systemroot%\AppPatch\Custom\*.* > < %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x > < %PROGRAMFILES%\PC-Doctor\Downloads\*.* > < %PROGRAMFILES%\Internet Explorer\*.tmp > < %PROGRAMFILES%\Internet Explorer\*.dat > < %USERPROFILE%\My Documents\*.exe > < %USERPROFILE%\*.exe > [2010/08/29 01:45:31 | 000,000,000 | ---- | M] () -- C:\Users\Katherine\mssefullinstall-amd64fre-en-us-vista-win7.exe < %systemroot%\ADDINS\*.* > < %systemroot%\assembly\*.bak2 > < %systemroot%\Config\*.* > < %systemroot%\REPAIR\*.bak2 > < %systemroot%\SECURITY\Database\*.sdb /x > [2009/11/04 20:09:57 | 000,008,192 | ---- | M] () -- C:\Windows\security\database\edb.chk [2009/11/04 20:09:27 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edb.log [2009/08/21 09:18:16 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edbres00001.jrs [2009/08/21 09:18:16 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edbres00002.jrs [2009/11/04 20:09:27 | 001,056,768 | ---- | M] () -- C:\Windows\security\database\tmp.edb < %systemroot%\SYSTEM\*.bak2 > < %systemroot%\Web\*.bak2 > < %systemroot%\Driver Cache\*.* > < %PROGRAMFILES%\Mozilla Firefox\0*.exe > < %ProgramFiles%\Microsoft Common\*.* > < %ProgramFiles%\TinyProxy. > < %USERPROFILE%\Favorites\*.url /x > [2008/08/15 17:17:04 | 000,000,402 | -HS- | M] () -- C:\Users\Katherine\Favorites\desktop.ini < %systemroot%\system32\*.bk > < %systemroot%\*.te > < %systemroot%\system32\system32\*.* > < %ALLUSERSPROFILE%\*.dat /x > [2009/04/24 15:24:58 | 000,000,088 | RHS- | M] () -- C:\ProgramData\418A2EBD90.sys [1999/07/07 02:00:00 | 000,000,006 | RHS- | M] () -- C:\ProgramData\D81EDBF9-D167-4011-B77D-211DF920EB80 [2009/04/24 15:25:11 | 000,002,672 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys [2009/05/21 15:26:21 | 000,005,184 | ---- | M] () -- C:\ProgramData\N360BUOptions.ini [2009/10/03 20:15:55 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2010/09/13 06:55:38 | 000,035,275 | ---- | M] () -- C:\ProgramData\nvModes.001 < %systemroot%\system32\drivers\*.rmv > < dir /b "%systemroot%\system32\*.exe" | find /i " " /c > < dir /b "%systemroot%\*.exe" | find /i " " /c > < %PROGRAMFILES%\Microsoft\*.* > < %systemroot%\System32\Wbem\proquota.exe > < %PROGRAMFILES%\Mozilla Firefox\*.dat > < %USERPROFILE%\Cookies\*.txt /x > < %SystemRoot%\system32\fonts\*.* > < %systemroot%\system32\winlog\*.* > < %systemroot%\system32\Language\*.* > < %systemroot%\system32\Settings\*.* > < %systemroot%\system32\*.quo > < %SYSTEMROOT%\AppPatch\*.exe > < %SYSTEMROOT%\inf\*.exe > < %SYSTEMROOT%\Installer\*.exe > < %systemroot%\system32\config\*.bak2 > < %systemroot%\system32\Computers\*.* > < %SystemRoot%\system32\Sound\*.* > < %SystemRoot%\system32\SpecialImg\*.* > < %SystemRoot%\system32\code\*.* > < %SystemRoot%\system32\draft\*.* > < %SystemRoot%\system32\MSSSys\*.* > < %ProgramFiles%\Javascript\*.* > < %systemroot%\pchealth\helpctr\System\*.exe /s > < %systemroot%\Web\*.exe > < %systemroot%\system32\msn\*.* > < %systemroot%\system32\*.tro > < %AppData%\Microsoft\Installer\msupdates\*.* > < %ProgramFiles%\Messenger\*.exe > < %systemroot%\system32\systhem32\*.* > < %systemroot%\system\*.exe > < %USERPROFILE%\Templates\*.tmp > < %SYSTEMDRIVE%\explorexxx.exe\*.* > < %Windir%\Installer\*.tmp > [12 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ] < %systemroot%\System32\*.xco > < %ProgramFiles%\system32\*.* > < %systemroot%\System32\windos\*.* > < %SystemRoot%\system32\sandbox\*.* > < %SystemRoot%\system32\*.amo > < %SystemRoot%\system32\Windows Live\*.* > < %ProgramFiles%\logs\*.* > < %ProgramFiles%\Bifrost\*.* > < %SystemRoot%\system32\*.goo > < %systemroot%\system32\IME\*.* > < %systemroot%\BackUp\*.* > < %systemroot%\system32\*.ico > [2006/09/18 23:31:55 | 000,107,620 | ---- | M] () -- C:\Windows\SysWOW64\acwizard.ico < %systemroot%\system\*.dat > [2008/08/15 17:16:00 | 000,000,044 | ---- | M] () -- C:\Windows\system\hpsysdrv.dat < %systemroot%\system\*.exe > < %AppData%\Macromedia\Common\*.* > < %SYSTEMDRIVE%\dir\*.* /s > < %systemroot%\system32\ras\*.exe > < %SYSTEMDRIVE%\MFILES\*.* > < %SYSTEMDRIVE%\mDNSRespon.exe\*.* > < %systemroot%\system32\services\*.* > < %systemroot%\Spooler\*.* > < %ProgramFiles%\system32\*.* > < %systemroot%\system32\Setup\*.dll /x > < %systemroot%\system32\*.mine > < %SYSTEMDRIVE%\cleansweep.exe\*.* > < %systemroot%\system32\ras\*.dll > < %systemroot%\system32\ras\*.drv > < %systemroot%\*.iq > < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs > ========== Alternate Data Streams ========== @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A8ADE5D8 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP  FC5A2B2@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:A2947BEA < End of report > |
13-Sep-2010, 05:01 PM
#9 | |||||
| Hello, OTL Fix We need to run an OTL Fix
NEXT: Malwarebytes' Anti-Malware I see that you have Malwarebytes' Anti-Malware installed on your computer could you please do a scan using these settings:
NEXT: Update Adobe Reader Earlier versions of Adobe Reader have known security flaws so it is recommended that you update your copy
NEXT: ESET Online Scanner I'd like us to scan your machine with ESET Online Scan Note: It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time. Please don't go surfing while your resident protection is disabled! Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs.
NEXT: Security Check Download Security Check by screen317 from here or here.
__________________ Please Note: Unless notified in advance, any thread that has not been replied to within 3 days will be removed from my Subscribed Threads list. |
 |
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
Similar Threads | ||||
| Title | Thread Starter | Forum | Replies | Last Post |
| Help needed! Hijackthis log and mbam log | Tearaana | Virus & Other Malware Removal | 0 | 22-Oct-2009 08:19 AM |
| Help Please! My HijackThis Log | butters09 | Virus & Other Malware Removal | 0 | 21-Sep-2009 06:03 PM |
| Help Please, Hijackthis and Malwarebytes Close | snakekilla | Virus & Other Malware Removal | 1 | 22-Aug-2009 12:10 PM |
| I Need Help with Hijackthis and i have a question | Ashmic | Virus & Other Malware Removal | 1 | 20-Dec-2008 06:06 PM |
| Noob help please - HijackThis log inside - can you help me? | JUDGECAL | Virus & Other Malware Removal | 2 | 10-Jun-2004 02:45 PM |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 09:55 PM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. |  |
on your desktop.
textbox. Do not include the word "Code"
.
button.
to download the ESET Smart Installer. Save it to your desktop.
icon on your desktop.
button.
, and save the file to your desktop using a unique name, such as
button.
Facebook
Twitter
TechGuy.tv
TSG Mobile