Advertisement
Advertisement
| | |
| |
30-Jun-2012, 10:14 PM
#31 | ||||||
| Please run the AVG Remover Tool (the first one on the list): http://www.avg.com/ca-en/utilities Then reboot and try running ComboFix again. If it still alerts to AVG then do the following:
Among the entries listed you should see the following: {17DDD097-36FF-435F-9E1B-52D74245D6BF} Highlight the above entry and then click on the Delete button. Be sure not to delete any others. Then reboot and try ComboFix again.
__________________ Microsoft MVP - Consumer Security |
|
01-Jul-2012, 02:07 PM
#32 |
| I tried this again and the AVG was still on there. I get all the way through to Query and typed in the select information and hit apply. Then I get an error: Number: 0x80041017 Facility: WMI Description: Invalid Query ???? |
|
01-Jul-2012, 04:28 PM
#34 |
| ComboFix 12-07-01.03 - Elaine Strean 07/01/2012 13:11:53.1.1 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1982.1316 [GMT -7:00] Running from: c:\documents and settings\Elaine Strean\Desktop\puppy.exe AV: Trend Micro Titanium Maximum Security *Disabled/Updated* {7D2296BC-32CC-4519-917E-52E652474AF5} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\All Users\Application Data\currdat.lst.tmp c:\documents and settings\All Users\Application Data\TEMP c:\documents and settings\Elaine Strean\GoToAssistDownloadHelper.exe c:\program files\Angle Interactive\RD Platinum v5.0 c:\program files\Angle Interactive\RD Platinum v5.0\report.csv c:\program files\Internet Explorer\SET5D2.tmp c:\windows\Downloaded Program Files\ODCTOOLS c:\windows\SET4CA.tmp c:\windows\system32\_003060_.tmp.dll c:\windows\system32\_003061_.tmp.dll c:\windows\system32\_003062_.tmp.dll c:\windows\system32\_003063_.tmp.dll c:\windows\system32\_003070_.tmp.dll c:\windows\system32\_003071_.tmp.dll c:\windows\system32\_003072_.tmp.dll c:\windows\system32\_003073_.tmp.dll c:\windows\system32\_003075_.tmp.dll c:\windows\system32\_003076_.tmp.dll c:\windows\system32\_003079_.tmp.dll c:\windows\system32\_003080_.tmp.dll c:\windows\system32\_003082_.tmp.dll c:\windows\system32\_003083_.tmp.dll c:\windows\system32\_003084_.tmp.dll c:\windows\system32\_003086_.tmp.dll c:\windows\system32\_003089_.tmp.dll c:\windows\system32\_003090_.tmp.dll c:\windows\system32\_003094_.tmp.dll c:\windows\system32\_003095_.tmp.dll c:\windows\system32\_003097_.tmp.dll c:\windows\system32\_003100_.tmp.dll c:\windows\system32\_003102_.tmp.dll c:\windows\system32\_003103_.tmp.dll c:\windows\system32\_003104_.tmp.dll c:\windows\system32\_003105_.tmp.dll c:\windows\system32\_003106_.tmp.dll c:\windows\system32\_003109_.tmp.dll c:\windows\system32\_003110_.tmp.dll c:\windows\system32\_003111_.tmp.dll c:\windows\system32\_003112_.tmp.dll c:\windows\system32\_003113_.tmp.dll c:\windows\system32\_003118_.tmp.dll c:\windows\system32\_003120_.tmp.dll c:\windows\system32\_003121_.tmp.dll c:\windows\system32\AutoRun.inf c:\windows\system32\dllcache\dlimport.exe c:\windows\system32\kill.exe c:\windows\system32\SET1077.tmp c:\windows\system32\SET107B.tmp c:\windows\system32\SET1085.tmp c:\windows\system32\SET10FC.tmp c:\windows\system32\SET1388.tmp c:\windows\system32\SET1389.tmp c:\windows\system32\SET1429.tmp c:\windows\system32\SET142B.tmp c:\windows\system32\SET142E.tmp c:\windows\system32\SET186.tmp c:\windows\system32\SET187.tmp c:\windows\system32\SET189.tmp c:\windows\system32\SET18B.tmp c:\windows\system32\SET18D.tmp c:\windows\system32\SET18F.tmp c:\windows\system32\SET194.tmp c:\windows\system32\SET195.tmp c:\windows\system32\SET198.tmp c:\windows\system32\SET1A7.tmp c:\windows\system32\SET1AD.tmp c:\windows\system32\SET1AE.tmp c:\windows\system32\SET1B0.tmp c:\windows\system32\SET1B1.tmp c:\windows\system32\SET1B2.tmp c:\windows\system32\SET1B3.tmp c:\windows\system32\SET1B4.tmp c:\windows\system32\SET1B6.tmp c:\windows\system32\SET1B7.tmp c:\windows\system32\SET1B8.tmp c:\windows\system32\SET1C3.tmp c:\windows\system32\SET1C4.tmp c:\windows\system32\SET1C5.tmp c:\windows\system32\SET1C6.tmp c:\windows\system32\SET1C9.tmp c:\windows\system32\SET1CB.tmp c:\windows\system32\SET1CC.tmp c:\windows\system32\SET1D0.tmp c:\windows\system32\SET1D2.tmp c:\windows\system32\SET1D3.tmp c:\windows\system32\SET1D6.tmp c:\windows\system32\SET1D7.tmp c:\windows\system32\SET1D9.tmp c:\windows\system32\SET1DA.tmp c:\windows\system32\SET1DB.tmp c:\windows\system32\SET1E0.tmp c:\windows\system32\SET1E1.tmp c:\windows\system32\SET1E2.tmp c:\windows\system32\SET1E3.tmp c:\windows\system32\SET1E4.tmp c:\windows\system32\SET1EA.tmp c:\windows\system32\SET1EF.tmp c:\windows\system32\SET1F0.tmp c:\windows\system32\SET1F4.tmp c:\windows\system32\SET1F7.tmp c:\windows\system32\SET1F8.tmp c:\windows\system32\SET1FF.tmp c:\windows\system32\SET200.tmp c:\windows\system32\SET203.tmp c:\windows\system32\SET207.tmp c:\windows\system32\SET210.tmp c:\windows\system32\SET211.tmp c:\windows\system32\SET214.tmp c:\windows\system32\SET216.tmp c:\windows\system32\SET217.tmp c:\windows\system32\SET218.tmp c:\windows\system32\SET219.tmp c:\windows\system32\SET21A.tmp c:\windows\system32\SET21B.tmp c:\windows\system32\SET22B.tmp c:\windows\system32\SET230.tmp c:\windows\system32\SET231.tmp c:\windows\system32\SET232.tmp c:\windows\system32\SET234.tmp c:\windows\system32\SET235.tmp c:\windows\system32\SET236.tmp c:\windows\system32\SET237.tmp c:\windows\system32\SET239.tmp c:\windows\system32\SET23A.tmp c:\windows\system32\SET23E.tmp c:\windows\system32\SET23F.tmp c:\windows\system32\SET243.tmp c:\windows\system32\SET244.tmp c:\windows\system32\SET246.tmp c:\windows\system32\SET24A.tmp c:\windows\system32\SET24B.tmp c:\windows\system32\SET24C.tmp c:\windows\system32\SET253.tmp c:\windows\system32\SET254.tmp c:\windows\system32\SET25A.tmp c:\windows\system32\SET25B.tmp c:\windows\system32\SET25C.tmp c:\windows\system32\SET25D.tmp c:\windows\system32\SET25F.tmp c:\windows\system32\SET265.tmp c:\windows\system32\SET271.tmp c:\windows\system32\SET273.tmp c:\windows\system32\SET275.tmp c:\windows\system32\SET276.tmp c:\windows\system32\SET277.tmp c:\windows\system32\SET27C.tmp c:\windows\system32\SET283.tmp c:\windows\system32\SET285.tmp c:\windows\system32\SET286.tmp c:\windows\system32\SET289.tmp c:\windows\system32\SET28B.tmp c:\windows\system32\SET28E.tmp c:\windows\system32\SET28F.tmp c:\windows\system32\SET29E.tmp c:\windows\system32\SET2A0.tmp c:\windows\system32\SET2A1.tmp c:\windows\system32\SET2A2.tmp c:\windows\system32\SET2A9.tmp c:\windows\system32\SET2AA.tmp c:\windows\system32\SET2AD.tmp c:\windows\system32\SET2AE.tmp c:\windows\system32\SET2AF.tmp c:\windows\system32\SET2B0.tmp c:\windows\system32\SET2B1.tmp c:\windows\system32\SET2B3.tmp c:\windows\system32\SET2B4.tmp c:\windows\system32\SET2B5.tmp c:\windows\system32\SET2B7.tmp c:\windows\system32\SET2B8.tmp c:\windows\system32\SET2B9.tmp c:\windows\system32\SET2BC.tmp c:\windows\system32\SET2BF.tmp c:\windows\system32\SET2C4.tmp c:\windows\system32\SET2C5.tmp c:\windows\system32\SET2C6.tmp c:\windows\system32\SET2CB.tmp c:\windows\system32\SET2CC.tmp c:\windows\system32\SET2CD.tmp c:\windows\system32\SET2CF.tmp c:\windows\system32\SET2D2.tmp c:\windows\system32\SET2D4.tmp c:\windows\system32\SET2D5.tmp c:\windows\system32\SET2D8.tmp c:\windows\system32\SET2D9.tmp c:\windows\system32\SET2DC.tmp c:\windows\system32\SET2DF.tmp c:\windows\system32\SET2E0.tmp c:\windows\system32\SET2E7.tmp c:\windows\system32\SET2E9.tmp c:\windows\system32\SET2EC.tmp c:\windows\system32\SET2F2.tmp c:\windows\system32\SET2F3.tmp c:\windows\system32\SET2F4.tmp c:\windows\system32\SET2F8.tmp c:\windows\system32\SET301.tmp c:\windows\system32\SET303.tmp c:\windows\system32\SET305.tmp c:\windows\system32\SET306.tmp c:\windows\system32\SET30C.tmp c:\windows\system32\SET30D.tmp c:\windows\system32\SET30E.tmp c:\windows\system32\SET30F.tmp c:\windows\system32\SET310.tmp c:\windows\system32\SET311.tmp c:\windows\system32\SET312.tmp c:\windows\system32\SET314.tmp c:\windows\system32\SET316.tmp c:\windows\system32\SET318.tmp c:\windows\system32\SET319.tmp c:\windows\system32\SET31E.tmp c:\windows\system32\SET328.tmp c:\windows\system32\SET32A.tmp c:\windows\system32\SET32B.tmp c:\windows\system32\SET32C.tmp c:\windows\system32\SET32E.tmp c:\windows\system32\SET330.tmp c:\windows\system32\SET331.tmp c:\windows\system32\SET335.tmp c:\windows\system32\SET337.tmp c:\windows\system32\SET338.tmp c:\windows\system32\SET33F.tmp c:\windows\system32\SET34A.tmp c:\windows\system32\SET34D.tmp c:\windows\system32\SET34E.tmp c:\windows\system32\SET34F.tmp c:\windows\system32\SET352.tmp c:\windows\system32\SET35A.tmp c:\windows\system32\SET362.tmp c:\windows\system32\SET364.tmp c:\windows\system32\SET367.tmp c:\windows\system32\SET36A.tmp c:\windows\system32\SET36C.tmp c:\windows\system32\SET36E.tmp c:\windows\system32\SET372.tmp c:\windows\system32\SET381.tmp c:\windows\system32\SET385.tmp c:\windows\system32\SET387.tmp c:\windows\system32\SET389.tmp c:\windows\system32\SET390.tmp c:\windows\system32\SET395.tmp c:\windows\system32\SET396.tmp c:\windows\system32\SET3A0.tmp c:\windows\system32\SET3AB.tmp c:\windows\system32\SET3B1.tmp c:\windows\system32\SET3B3.tmp c:\windows\system32\SET3B4.tmp c:\windows\system32\SET3B6.tmp c:\windows\system32\SET3BA.tmp c:\windows\system32\SET3BE.tmp c:\windows\system32\SET3C5.tmp c:\windows\system32\SET3C8.tmp c:\windows\system32\SET3CA.tmp c:\windows\system32\SET3D0.tmp c:\windows\system32\SET3DD.tmp c:\windows\system32\SET3DE.tmp c:\windows\system32\SET3E0.tmp c:\windows\system32\SET3E1.tmp c:\windows\system32\SET3E2.tmp c:\windows\system32\SET3EC.tmp c:\windows\system32\SET3F0.tmp c:\windows\system32\SET3F5.tmp c:\windows\system32\SET3FB.tmp c:\windows\system32\SET40E.tmp c:\windows\system32\SET40F.tmp c:\windows\system32\SET423.tmp c:\windows\system32\SET430.tmp c:\windows\system32\SET431.tmp c:\windows\system32\SET434.tmp c:\windows\system32\SET439.tmp c:\windows\system32\SET43B.tmp c:\windows\system32\SET440.tmp c:\windows\system32\SET443.tmp c:\windows\system32\SET444.tmp c:\windows\system32\SET446.tmp c:\windows\system32\SET447.tmp c:\windows\system32\SET448.tmp c:\windows\system32\SET449.tmp c:\windows\system32\SET44B.tmp c:\windows\system32\SET44D.tmp c:\windows\system32\SET44E.tmp c:\windows\system32\SET450.tmp c:\windows\system32\SET453.tmp c:\windows\system32\SET455.tmp c:\windows\system32\SET45A.tmp c:\windows\system32\SET45B.tmp c:\windows\system32\SET45C.tmp c:\windows\system32\SET464.tmp c:\windows\system32\SET46B.tmp c:\windows\system32\SET474.tmp c:\windows\system32\SET477.tmp c:\windows\system32\SET479.tmp c:\windows\system32\SET47D.tmp c:\windows\system32\SET47F.tmp c:\windows\system32\SET480.tmp c:\windows\system32\SET481.tmp c:\windows\system32\SET485.tmp c:\windows\system32\SET486.tmp c:\windows\system32\SET48A.tmp c:\windows\system32\SET48B.tmp c:\windows\system32\SET48E.tmp c:\windows\system32\SET490.tmp c:\windows\system32\SET492.tmp c:\windows\system32\SET496.tmp c:\windows\system32\SET499.tmp c:\windows\system32\SET49B.tmp c:\windows\system32\SET49E.tmp c:\windows\system32\SET4A1.tmp c:\windows\system32\SET4A3.tmp . . ((((((((((((((((((((((((( Files Created from 2012-06-01 to 2012-07-01 ))))))))))))))))))))))))))))))) . . 2012-07-01 20:05 . 2012-07-01 20:05 12568 ----a-w- c:\windows\system32\drivers\PROCEXP113.SYS 2012-07-01 17:50 . 2012-07-01 17:50 -------- d-----w- C:\puppy 2012-06-30 19:28 . 2012-06-30 19:29 -------- dc-h--w- c:\windows\ie8 2012-06-29 23:47 . 2012-06-29 23:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage 2012-06-29 21:36 . 2012-06-29 21:36 -------- d-----w- c:\documents and settings\Elaine Strean\Application Data\SUPERAntiSpyware.com 2012-06-29 21:36 . 2012-06-29 21:36 -------- d-----w- c:\program files\SUPERAntiSpyware 2012-06-29 21:36 . 2012-06-29 21:36 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com 2012-06-29 21:32 . 2012-06-29 21:32 -------- d-----w- c:\documents and settings\Elaine Strean\Application Data\Malwarebytes 2012-06-29 21:32 . 2012-06-29 21:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2012-06-29 21:32 . 2012-06-29 21:32 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-06-29 21:32 . 2012-04-04 22:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-29 00:50 . 2012-06-29 00:50 388096 ----a-r- c:\documents and settings\Elaine Strean\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-06-23 02:05 . 2012-06-23 02:08 -------- d-----w- c:\documents and settings\Kenneth Strean\Application Data\xfinitytb 2012-06-22 03:18 . 2012-06-22 03:18 -------- d-----w- c:\documents and settings\Elaine Strean\Application Data\AVG2012 2012-06-22 00:06 . 2012-06-22 00:06 -------- d-----w- c:\documents and settings\Kenneth Strean\Application Data\AVG2012 2012-06-22 00:04 . 2012-06-22 02:28 -------- d-----w- c:\program files\Common Files\AVG Secure Search 2012-06-22 00:03 . 2012-06-22 00:03 -------- d--h--w- c:\documents and settings\All Users\Application Data\Common Files 2012-06-22 00:03 . 2012-07-01 17:41 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG2012 2012-06-08 23:50 . 2012-06-30 01:12 -------- d-----w- c:\program files\comcasttb . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-06-14 00:54 . 2012-04-01 02:32 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-06-14 00:54 . 2012-02-19 01:34 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-06-05 00:35 . 2008-07-15 20:07 222448 ----a-w- c:\windows\system32\muweb.dll 2012-06-02 22:19 . 2007-07-31 02:18 22040 ----a-w- c:\windows\system32\wucltui.dll.mui 2012-06-02 22:19 . 2007-07-31 02:19 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui 2012-06-02 22:19 . 2004-08-10 18:02 329240 ----a-w- c:\windows\system32\wucltui.dll 2012-06-02 22:19 . 2004-08-10 18:02 219160 ----a-w- c:\windows\system32\wuaucpl.cpl 2012-06-02 22:19 . 2004-08-10 18:02 210968 ----a-w- c:\windows\system32\wuweb.dll 2012-06-02 22:19 . 2007-07-31 02:19 45080 ----a-w- c:\windows\system32\wups2.dll 2012-06-02 22:19 . 2007-07-31 02:19 15384 ----a-w- c:\windows\system32\wuapi.dll.mui 2012-06-02 22:19 . 2004-08-10 18:02 53784 ----a-w- c:\windows\system32\wuauclt.exe 2012-06-02 22:19 . 2004-08-10 18:02 35864 ----a-w- c:\windows\system32\wups.dll 2012-06-02 22:19 . 2004-08-10 17:50 97304 ----a-w- c:\windows\system32\cdm.dll 2012-06-02 22:19 . 2007-07-31 02:18 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui 2012-06-02 22:19 . 2004-08-10 18:02 577048 ----a-w- c:\windows\system32\wuapi.dll 2012-06-02 22:19 . 2004-08-10 18:02 1933848 ----a-w- c:\windows\system32\wuaueng.dll 2012-06-02 22:18 . 2008-07-15 20:07 275696 ----a-w- c:\windows\system32\mucltui.dll 2012-06-02 22:18 . 2008-07-15 20:07 17136 ----a-w- c:\windows\system32\mucltui.dll.mui . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [7] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll [-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\$NtServicePackUninstall$\netman.dll [-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\system32\netman.dll [-] 2005-08-22 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . c:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll [7] 2004-08-04 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB905414$\netman.dll . [7] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll [-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\rpcss.dll [-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\system32\rpcss.dll [-] 2005-07-26 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll [-] 2005-04-28 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll [-] 2005-04-28 . C8061F289E000703E7672916B7FE1571 . 395776 . . [5.1.2600.2665] . . c:\windows\$NtUninstallKB902400$\rpcss.dll [7] 2004-08-04 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB894391$\rpcss.dll . [7] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe [-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe [-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe [-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\system32\spoolsv.exe . [7] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll [-] 2005-07-26 04:39 . 34BBD9ACC1538818F2C878898C64E793 . 243200 . . [2001.12.4414.308] . . c:\windows\$NtServicePackUninstall$\es.dll [-] 2005-07-26 04:39 . 34BBD9ACC1538818F2C878898C64E793 . 243200 . . [2001.12.4414.308] . . c:\windows\system32\es.dll [-] 2005-07-26 04:20 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll [7] 2004-08-04 10:00 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB902400$\es.dll . [7] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll [-] 2005-09-01 . 648BF0B4DDE4F7A1156DAE7174D36EFA . 19968 . . [5.1.2600.2751] . . c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll [-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll [-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\system32\linkinfo.dll [7] 2004-08-04 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB900725$\linkinfo.dll . [7] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll [-] 2005-07-08 . 1418A3A6E76E5A2E3F5E43866E793A8B . 249344 . . [5.1.2600.2716] . . c:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll [-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll [-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\system32\tapisrv.dll [7] 2004-08-04 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893756$\tapisrv.dll . [7] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll [-] 2007-03-08 . 7AA4F6C00405DFC4B70ED4214E7D687B . 578048 . . [5.1.2600.3099] . . c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll [-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\$NtServicePackUninstall$\user32.dll [-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\system32\user32.dll [-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll . [7] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe [-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe [-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\explorer.exe [-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe . [7] 2008-04-14 . ECCE74BC6168375016450A86A164D976 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll [-] 2005-07-26 . AB8231D13692AC5088EB9C226B0C0576 . 1285120 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\ole32.dll [-] 2005-07-26 . AB8231D13692AC5088EB9C226B0C0576 . 1285120 . . [5.1.2600.2726] . . c:\windows\system32\ole32.dll [-] 2005-07-26 . A2F755E237FA2CDD748A80BFBE6657F3 . 1285632 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\ole32.dll [-] 2005-04-28 . 7440D29F257B7E44329343F944F2142C . 1286144 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\ole32.dll [-] 2005-04-28 . 5950E4F28FDA9D147576BF6798937397 . 1285120 . . [5.1.2600.2665] . . c:\windows\$NtUninstallKB902400$\ole32.dll [7] 2004-08-04 . 4FE9D9FA62D020E35E0AC6D1AEEB96F0 . 1281536 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB894391$\ole32.dll . [7] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll [-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll [-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\system32\shsvcs.dll [-] 2006-12-19 . 53D9184A21C5CBF600D918E51EF3A7E5 . 135168 . . [6.00.2900.3051] . . c:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll . [7] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll [-] 2006-06-26 . B5D08C96B2DADAF5171FB69E341B272B . 7680 . . [5.1.2600.2938] . . c:\windows\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll [-] 2006-06-26 . 5F098BD2AE6B03044B085DECFFDF91EC . 8192 . . [5.1.2600.2938] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll [-] 2006-06-26 . 5F098BD2AE6B03044B085DECFFDF91EC . 8192 . . [5.1.2600.2938] . . c:\windows\system32\rasadhlp.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-06-26 3906432] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-04-07 8466432] "Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-02-03 233304] "nwiz"="nwiz.exe" [2008-04-07 1626112] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-04-07 81920] "HostManager"="c:\program files\Common Files\AOL\1208987670\EE\AOLHostManager.exe" [2004-11-03 125528] "MegaPanel"="c:\program files\National Consumer Panel\NCP Internet Transporter\HSTrans.exe" [2009-12-11 2113536] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] "Trend Micro Titanium"="c:\program files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe" [2011-10-08 1111568] "Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2011-02-10 116752] "RTHDCPL"="RTHDCPL.EXE" [2008-04-07 16859648] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ WhiteSmoke Translator.lnk - c:\documents and settings\Elaine Strean\Local Settings\Temporary Internet Files\Content.IE5\GKAOUDCI\WhiteSmokeWriterGeo5002_en[1].exe [N/A] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\Shell ExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] 2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCO RE] @="" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus] "DisableMonitoring"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\Auth orizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"= "c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"= "c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"= "c:\\Program Files\\America Online 9.0\\waol.exe"= "c:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltsmon.exe"= "c:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltpspd.exe"= "c:\\Program Files\\Common Files\\AOL\\1208987670\\EE\\AOLServiceHost.exe"= "c:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"= "c:\\WINDOWS\\system32\\usmt\\migwiz.exe"= "c:\\dell\\EXPRESS.EXE"= "c:\\WINDOWS\\system32\\mmc.exe"= "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\YahooMusicEngine.exe"= . R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [7/22/2011 9:27 AM 12880] R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/12/2011 2:55 PM 67664] R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [8/11/2011 4:38 PM 116608] R2 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe [12/19/2011 11:40 AM 188272] R2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [12/19/2011 11:47 AM 64080] S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys --> c:\windows\system32\DRIVERS\avgidshx.sys [?] S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [1/15/2010 7:08 PM 135664] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [3/31/2012 7:32 PM 257224] S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys --> c:\windows\system32\DRIVERS\avgidsshimx.sys [?] S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [1/15/2010 7:08 PM 135664] . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}] 2009-03-08 11:32 128512 ----a-w- c:\windows\system32\advpack.dll . Contents of the 'Scheduled Tasks' folder . 2012-07-01 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 00:54] . 2012-07-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-16 02:08] . 2012-07-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-16 02:08] . 2012-06-29 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task d3c607ac-0c85-413d-a6f2-fef53e1af5d0.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2011-05-04 17:52] . 2012-06-30 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task e6c77580-b657-4ab2-b161-a25b1e8ff57c.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2011-05-04 17:52] . 2012-07-01 c:\windows\Tasks\User_Feed_Synchronization-{6AFCE08B-0196-4590-A1EC-5A865B41E2BB}.job - c:\windows\system32\msfeedssync.exe [2007-08-14 11:31] . . ------- Supplementary Scan ------- . uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 mSearch Bar = hxxp://www.google.com/ie uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html TCP: DhcpNameServer = 75.75.75.75 75.75.76.76 DPF: CabBuilder - hxxp://www.imgag.com/kiw/toolbar/download/InstallerControl.cab . - - - - ORPHANS REMOVED - - - - . URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - (no file) URLSearchHooks-{37153479-1976-43c3-a1ee-557513977b64} - (no file) BHO-{c9d421f2-bf25-4224-95ed-2b491106634d} - (no file) Toolbar-Locked - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) WebBrowser-{37153479-1976-43C3-A1EE-557513977B64} - (no file) HKCU-Run-DellSupportCenter - c:\program files\Dell Support Center\bin\sprtcmd.exe HKCU-Run-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe HKCU-Run-AROReminder - c:\program files\Advanced Registry Optimizer\aro.exe HKCU-Run-RegistryMechanic - c:\program files\Registry Mechanic\RegMech.exe HKCU-Run-SpywareTerminatorUpdate - c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe HKCU-Run-KGShareApp - c:\program files\Kodak\KODAK Share Button App\KGShare_App.exe HKLM-Run-DellSupportCenter - c:\program files\Dell Support Center\bin\sprtcmd.exe HKLM-Run-ErrorTeck - c:\program files\ErrorTeck\ErrorTeck.exe HKLM-Run-RegWork - c:\program files\RegWork\RegWork.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-07-01 13:22 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(664) c:\program files\SUPERAntiSpyware\SASWINLO.DLL . - - - - - - - > 'explorer.exe'(3612) c:\windows\system32\msi.dll c:\windows\system32\ieframe.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\program files\Common Files\aolshare\aolshcpy.dll c:\program files\ArcSoft\Software Suite\PhotoImpression\share\pihook.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\Trend Micro\AMSP\coreFrameworkHost.exe c:\program files\Common Files\AOL\ACS\AOLAcsd.exe c:\program files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe c:\program files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe c:\windows\system32\nvsvc32.exe c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\windows\system32\RUNDLL32.EXE c:\windows\RTHDCPL.EXE c:\program files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe c:\progra~1\COMMON~1\AOL\120898~1\EE\AOLHOS~1.EXE c:\progra~1\COMMON~1\AOL\120898~1\EE\AOLServiceHost.exe . ************************************************************************** . Completion time: 2012-07-01 13:27:42 - machine was rebooted ComboFix-quarantined-files.txt 2012-07-01 20:27 . Pre-Run: 138,444,857,344 bytes free Post-Run: 138,786,467,840 bytes free . WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect . - - End Of File - - 1827FC6A507463F403C6B6D91B05465F |
01-Jul-2012, 06:38 PM
#35 | ||||||
| Please run the following on-line scanner. Note that you must use Internet Explorer to perform the scan. Note: If you're running a 64-bit system you have to choose the 32-bit option in IE. To do that, go to the Start Menu and right-click the Internet Explorer (32-bit) icon and then select 'Run as administrator' from the right-click menu. http://www.eset.com/online-scanner Accept the Terms of Use and then press the Start button Allow the ActiveX control to be installed. Put a check by Remove found threats and then run the scan. When the scan is finished, you will see the results in a window. A log.txt file is created here: C:\Program Files\EsetOnlineScanner\log.txt. Open the log file with Notepad and copy and paste the contents here please.
__________________ Microsoft MVP - Consumer Security |
02-Jul-2012, 05:57 PM
#37 | ||||||
| I don't know. Is there a log? It may be at this location: C:\Program Files\EsetOnlineScanner\log.txt or this one: C:\Program Files\Eset\EsetOnlineScanner\log.txt |
|
02-Jul-2012, 07:47 PM
#38 |
| <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xml:lang="en" lang="en" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <base href="http://www.eset.com/" /> <link rel="shortcut icon" href="http://static1.int.esetstatic.com/fi...es/favicon.ico" type="image/x-ico; charset=binary" /> <link rel="icon" href="http://static1.int.esetstatic.com/fi...es/favicon.ico" type="image/x-ico; charset=binary" /> <title>ESET :: Download :: For Home</title> <meta name="keywords" content="antivirus software, spyware, antispyware, antispam, personal firewall" /> <meta name="description" content="ESET software provides advanced proactive antivirus protection. Download the award-winning ESET NOD32 Antivirus or ESET Smart Security now!" /> <meta name="author" content="ESET" /> <meta name="copyright" content="ESET" /> <meta name="doc-type" content="Web Page" /> <meta name="doc-class" content="Published" /> <meta name="doc-rights" content="Copywritten Work" /> <meta name="doc-publisher" content="ESET" /> <meta name="robots" content="index, follow" /> <meta name="google-site-verification" content="dHfSJtqaVSUJZCZxxWeEFEPe5bf8zWns1jsScwMdorc" /> <style type="text/css"> #sec-download .item-detail #os_dd #inpt_os, #sec-download .item-detail .select label span, .select label span {font-size: 11px !important;} span.ugheading { font-weight:bold; text-decoration:underline} ul#neug { padding-left:0px } ul#neug.links li { padding-left:0px;} ul#neug.links li a { background-image:url('fileadmin/templates/img/icn-pdf.png'); } .sec-download-new .down-detail .item-detail {padding:0px 0px 0px 60px !important} .sec-download-new .down-detail .new_area {margin-top:10px !important} .sec-download-new .down-detail .item-detail .alert {margin:0px !important;padding-bottom:10px !important} } </style><meta name="msvalidate.01" content="d92a49a0b538fe1bea905e38ba036ad8" /><meta name="yandex-verification" content="45e99e1a936f7f86" /> <meta property="og:description" content="ESET software provides advanced proactive antivirus protection. Download the award-winning ESET NOD32 Antivirus or ESET Smart Security now!" /> <meta property="og:url" content="http://www.eset.com/us/download/home/" /> <meta property="og:type" content="og_products roduct" /><link rel="alternate" type="application/rss+xml" title="ESET" href="http://www.eset.com/rss/rss-us-.xml" /> <meta property="og:title" content="ESET :: Download :: For Home" /> <link rel="stylesheet" type="text/css" media="all" href="http://static3.int.esetstatic.com/fi...617.merged.css" /> <link rel="stylesheet" type="text/css" media="print" href="http://static3.int.esetstatic.com/fi...b7f.merged.css" /> <!--[if IE 6]> <link href="fileadmin/templates/styles/ie6.css" type="text/css" rel="stylesheet" /> <script src="http://static3.int.esetstatic.com/fi...G.js"></script> <script> DD_belatedPNG.fix('img, div'); </script> <![endif]--> <!--[if IE 7]> <link href="fileadmin/templates/styles/ie7.css" type="text/css" rel="stylesheet" /> <![endif]--> <script type="text/javascript" src="http://static5.int.esetstatic.com/fi...y.js"></script> <script type="text/javascript" src="http://static4.int.esetstatic.com/fi...t.js"></script> <script type="text/javascript" src="http://static3.int.esetstatic.com/fi...d.js"></script> </head> <body> <script type="text/javascript"> FontSet(); </script> <div id="info"><div id="atom-eset-news-index"></div></div> <div id="page"> <div id="content"> <div id="top"><div id="atom-eset-header-index"> <script type="text/javascript"> document.observe('dom:loaded', function(){ var urlString = 'us/download/home/?_ajax_=newsHelper&screenwidth=' + screen.width + '&screenheight=' + screen.height + '&id=7435'; BoxUpdater.update(urlString.replace(/&/g,"&"));}); </script> <script type="text/javascript"> var aliases404 = new Array(); //console.log("creating aliases404 array"); </script> <script type="text/javascript"> var myDomain = ""; //console.log("domain " + ""); function getCookie(c_name) { var i,x,y,ARRcookies=document.cookie.split(";"); for (i=0;i<ARRcookies.length;i++) { x=ARRcookies[i].substr(0,ARRcookies[i].indexOf("=")); y=ARRcookies[i].substr(ARRcookies[i].indexOf("=")+1); x=x.replace(/^\s+|\s+$/g,""); if (x==c_name) { return unescape(y); } } } function in_array(needle, haystack) { var length = haystack.length; var i=0; for(var key in haystack) { //alert('comparing '+haystack[key].indexOf(needle,0)+' with '+(haystack[key].length - needle.length)); //alert('comparing '+haystack[key]+' with '+needle); i++; if(i<=length) { if(haystack[key].indexOf(needle,0) == (haystack[key].length - needle.length)) { return true; } } } return false; } function redirectBranch() { if(getCookie("fe_typo_branch")) { var currentBranch = ''; $$('a.branch-selector').each(function(el) { if(el.readAttribute('class') == "branch-selector sel") { currentBranch = el.readAttribute('title'); } }); if((currentBranch != titles[ids.indexOf(parseInt(getCookie("fe_typo_branch")))]) && (currentBranch.length > 0)) { //window.location = urls[ids.indexOf(parseInt(getCookie("fe_typo_branch")))] + urlParts[ids.indexOf(parseInt(getCookie("fe_typo_branch")))]; //alert(window.location.pathname.substring(1,window.location.pathname.length-1).split('/')); var pathParts = window.location.pathname.substring(1,window.location.pathname.length-1).split('/'); //console.log("pathparts "+pathParts); var urlPartToCheck = ''; if(in_array("/"+pathParts[0]+"/", urls)) { //alert('inarray'); if(pathParts.length > 1) { for(var i=1; i<pathParts.length; i++) { urlPartToCheck += pathParts[i] + "/"; } } } else { //alert('not inarray'); if(pathParts.length > 1) { var urlPartToCheck = ''; for(var i=0; i<pathParts.length; i++) { urlPartToCheck += pathParts[i] + "/"; } } } //console.log("urlparttocheck "+urlPartToCheck); if(!in_array(urlPartToCheck, aliases404)) { window.location = urls[ids.indexOf(parseInt(getCookie("fe_typo_branch")))] + urlParts[ids.indexOf(parseInt(getCookie("fe_typo_branch")))]; } else { //alert('we are in here'); window.location = urls[ids.indexOf(parseInt(getCookie("fe_typo_branch")))]; } } } } $$('a.branch-selector').each(function(el) { el.observe('click', function(element) { var actualDate = new Date(); var expires = new Date(); expires.setDate(actualDate.getDate()+365); //alert("fe_typo_branch" + "=" + ids[titles.indexOf(el.readAttribute('title'))] + "; expires="+expires.toUTCString()+"; path=/; domain=" + myDomain); document.cookie = "fe_typo_branch" + "=" + ids[titles.indexOf(el.readAttribute('title'))] + "; expires="+expires.toUTCString()+"; path=/; domain=" + myDomain; }); }); document.observe('dom:loaded', function() { $$('a.branch-selector').each(function(el) { el.observe('click', function(element) { var actualDate = new Date(); var expires = new Date(); expires.setDate(actualDate.getDate()+365); //alert("fe_typo_branch" + "=" + ids[titles.indexOf(el.readAttribute('title'))] + "; expires="+expires.toUTCString()+"; path=/; domain=" + myDomain); document.cookie = "fe_typo_branch" + "=" + ids[titles.indexOf(el.readAttribute('title'))] + "; expires="+expires.toUTCString()+"; path=/; domain=" + myDomain; }); }); }); var ids = new Array(); var urls = new Array(); var titles = new Array(); var urlParts = new Array(); </script> <div class="top_links"> <a href="us/language-selector/" class="world" id="countries-target" onclick="return false;"><strong>United States and Canada</strong></a> <span class="sep"> | </span> <a title="Partners" href="http://go.eset.com/us/partnerinfo">Partners</a> <span class="sep"> | </span> <a title="About ESET" href="us/about/profile/overview/">About ESET</a> <span class="sep"> | </span> <a class="cart" id="cart" title="Cart" href="http://cart.eset.com/c.438708/ssp/cart.ssp">Cart</a> </div> <div class="top_line"> <div class="logo"> <a href="us/"><img title="ESET :: Antivirus Software and Protection" alt="ESET logo" width="67" height="26" src="http://static5.int.esetstatic.com/fi.../logo-eset.png" /></a> </div> <ul class="m_menu"> <li> <a class="m01" title="For Home" href="us/home/"><span class="hdn">For Home</span></a> </li> <li> <a class="m02" title="For Business" href="us/business/eset-for-business/"><span class="hdn">For Business</span></a> </li> <li> <a class="m03" title="Store" href="http://go.eset.com/us/store"><span class="hdn">Store</span></a> </li> <li> <strong> <a class="m04" title="Download" href="us/download/home/"><span class="hdn">Download</span></a> </strong> </li> <li> <a class="m05" title="Support" href="http://kb.eset.com"><span class="hdn">Support</span></a> </li> </ul> <form id="search-form" action="/us/download/home/" method="get"> <fieldset class="search"> <legend></legend> <input type="hidden" id="search-redirect" value="" /> <input type="hidden" name="page" value="answers" /> <input type="hidden" name="type" value="search" /> <input id="search-target" type="text" title="Search for information about our products" class="input_cleaner input_text" name="question_box" value="Search" /> <input type="submit" id="search-submit" class="input_submit" value="Search" /> </fieldset> </form> <script type="text/javascript"> $('search-target').setAttribute("autocomplete", "off"); </script> </div> <div id="search-popup" style="display:none;"></div> </div></div> <div id="sub_area" class="content"> <div id="caption"><div id="atom-eset-caption-index"> <div id="print_hr"> <br /><br /> ESET Download For Home <hr /> </div> <div class="caption nobrd"> <h1 class="l">Download for Home</h1> </div> <div class="produkt_img"> <ul class="s_menu"> <li> <strong> <a name="activeMenu"> <span>For Home</span> </a> </strong> </li> <li> <a title="For Business" href="us/download/business/"> <span>For Business</span> </a> </li> <li> <a title="Documentation" href="us/download/documentation/"> <span>Documentation</span> </a> </li> <li> <a title="Utilities" href="us/download/utilities/"> <span>Utilities</span> </a> </li> <li> <a title="Training" href="us/download/training/"> <span>Training</span> </a> </li> <li> <a title="Free 30-day Trial" href="us/download/free-trial/"> <span>Free 30-day Trial</span> </a> </li> </ul> </div> </div></div> <div id="sec-download" class="new_area"><div id="c144643" class="csc-default" ><style type="text/css"> /* common styles */ .btn a.btn_blue_down { background: url("/fileadmin/templates/img/btn_blue.png") no-repeat scroll 0 0 transparent; color: #FFFFFF; display: block; font-size: 14px; height: 31px; line-height: 26px; margin-bottom: 2px; padding-left: 9px; width: 148px; } #sec-download .sec { overflow: hidden; padding-bottom: 11px; width: 910px; </style></div><div id="c38474" class="csc-default" ><div id="atom-eset_download-pi1-index"> <div class="sec-download-new"> <div class="forhome"> <div class="lists"> <div class="item"> <div class="f"> <a alt="ESET Smart Security" title="ESET Smart Security" href="us/download/home/detail/family/5" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Smart Security', 'Picture']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Smart Security', 'Picture']);"><img title="ESET Smart Security" alt="ESET Smart Security" width="50" height="80" src="http://static3.int.esetstatic.com/up..._ESS-v5_02.png" /></a> </div> <div class="c"> <h2><a title="ESET Smart Security" href="us/download/home/detail/family/5" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Smart Security', 'Title']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Smart Security', 'Title']);">ESET Smart Security</a></h2> <p>NOD32 Antivirus | Antispyware | Antispam | Firewall | Parental Controls | Security Training</p> </div> <div class="os"> <p class="windows">Windows</p> </div> <div class="btn"> <a class="btn_blue_down" href="http://www.eset.com/us/download/home/detail/family/5/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Smart Security', 'TryNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Smart Security', 'TryNow']);"> I already purchased </a> <div><div style="margin-bottom:5px"> </div><a href="/us/download/home/detail/family/5/?trl=es" class="btn_blue_down" onClick="s.tl(this,'o','Download Trial ESS Button');" title="I want a free trial">I want a free trial</a></div> </div> <div class="l"> <a style="background-image:url('fileadmin/templates/img/ico_l_buy.png');" href="us/store/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Smart Security', 'BuyNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Smart Security', 'BuyNow']);"> Buy now </a> <a style="background-image:url('fileadmin/templates/img/ico_l_info.png');" href="us/home/products/smart-security/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Smart Security', 'LearnMore']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Smart Security', 'LearnMore']);"> Learn more </a> <div> </div> </div> </div> <div class="divider_padding"><div class="divider"><hr /></div></div> <div class="item"> <div class="f"> <a alt="ESET NOD32 Antivirus" title="ESET NOD32 Antivirus" href="us/download/home/detail/family/2" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'Picture']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'Picture']);"><img title="ESET NOD32 Antivirus" alt="ESET NOD32 Antivirus" width="50" height="80" src="http://static1.int.esetstatic.com/up..._EAV-v5_02.png" /></a> </div> <div class="c"> <h2><a title="ESET NOD32 Antivirus" href="us/download/home/detail/family/2" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'Title']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'Title']);">ESET NOD32 Antivirus</a></h2> <p>Antivirus | Antispyware | Security Training</p> </div> <div class="os"> <p class="windows">Windows</p> </div> <div class="btn"> <a class="btn_blue_down" href="http://www.eset.com/us/download/home/detail/family/2" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'TryNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'TryNow']);"> I already purchased </a> <div><div style="margin-bottom:5px"> </div><a href="/us/download/home/detail/family/2/?trl=ea" class="btn_blue_down" onClick="s.tl(this,'o','Download Trial EAV Button');">I want a free trial</a></div> </div> <div class="l"> <a style="background-image:url('fileadmin/templates/img/ico_l_buy.png');" href="us/store/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'BuyNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'BuyNow']);"> Buy now </a> <a style="background-image:url('fileadmin/templates/img/ico_l_info.png');" href="us/home/products/antivirus/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'LearnMore']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus', 'LearnMore']);"> Learn more </a> <div> </div> </div> </div> <div class="divider_padding"><div class="divider"><hr /></div></div> <div class="item"> <div class="f"> <a alt="ESET Cybersecurity" title="ESET Cybersecurity" href="us/download/home/detail/family/29" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Cybersecurity', 'Picture']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Cybersecurity', 'Picture']);"><img title="ESET Cybersecurity" alt="ESET Cybersecurity" width="50" height="80" src="http://static2.int.esetstatic.com/up...x80_ECS_02.png" /></a> </div> <div class="c"> <h2><a title="ESET Cybersecurity" href="us/download/home/detail/family/29" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Cybersecurity', 'Title']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Cybersecurity', 'Title']);">ESET Cybersecurity</a></h2> <p>Antivirus | Antispyware | Security Training<br /> </p> </div> <div class="os"> <p class="mac_os_x">Mac OS X</p> </div> <div class="btn"> <a class="btn_blue_down" href="us/download/home/detail/family/29" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Cybersecurity', 'TryNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Cybersecurity', 'TryNow']);"> I already purchased </a> <div><div style="margin-bottom:5px"> </div><a href="/us/download/home/detail/family/29/?trl=ec" class="btn_blue_down" onClick="s.tl(this,'o','Download Trial ECS Button');">I want a free trial</a></div> </div> <div class="l"> <a style="background-image:url('fileadmin/templates/img/ico_l_buy.png');" href="us/store/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Cybersecurity', 'BuyNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Cybersecurity', 'BuyNow']);"> Buy now </a> <a style="background-image:url('fileadmin/templates/img/ico_l_info.png');" href="us/home/products/antivirus-for-mac/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Cybersecurity', 'LearnMore']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Cybersecurity', 'LearnMore']);"> Learn more </a> <div> </div> </div> </div> <div class="divider_padding"><div class="divider"><hr /></div></div> <div class="item"> <div class="f"> <a alt="ESET Mobile Security" title="ESET Mobile Security" href="us/download/home/detail/family/25" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Mobile Security', 'Picture']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Mobile Security', 'Picture']);"><img title="ESET Mobile Security" alt="ESET Mobile Security" width="50" height="80" src="http://static3.int.esetstatic.com/up..._EMS-02_01.png" /></a> </div> <div class="c"> <h2><a title="ESET Mobile Security" href="us/download/home/detail/family/25" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Mobile Security', 'Title']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Mobile Security', 'Title']);">ESET Mobile Security</a></h2> <p>Antivirus | Firewall | SMS Antispam | Anti-Theft | Security Training</p> </div> <div class="os"> <p class="mobile">Mobile</p> </div> <div class="btn"> <a class="btn_blue_down" href="us/download/home/detail/family/25" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Mobile Security', 'TryNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Mobile Security', 'TryNow']);"> I already purchased </a> <div><div style="margin-bottom:5px"> </div><a href="/us/download/home/detail/family/25/?trl=em" class="btn_blue_down" onClick="s.tl(this,'o','Download Trial EMS Button');">I want a free trial</a></div> </div> <div class="l"> <a style="background-image:url('fileadmin/templates/img/ico_l_buy.png');" href="us/store/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Mobile Security', 'BuyNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Mobile Security', 'BuyNow']);"> Buy now </a> <a style="background-image:url('fileadmin/templates/img/ico_l_info.png');" href="us/home/products/mobile-security/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET Mobile Security', 'LearnMore']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET Mobile Security', 'LearnMore']);"> Learn more </a> <div> </div> </div> </div> <div class="divider_padding"><div class="divider"><hr /></div></div> <div class="item"> <div class="f"> <a alt="ESET NOD32 Antivirus for Linux Desktop" title="ESET NOD32 Antivirus for Linux Desktop" href="us/download/home/detail/family/71" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'Picture']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'Picture']);"><img title="ESET NOD32 Antivirus for Linux Desktop" alt="ESET NOD32 Antivirus for Linux Desktop" width="50" height="80" src="http://static5.int.esetstatic.com/up...x80_EAV_04.png" /></a> </div> <div class="c"> <h2><a title="ESET NOD32 Antivirus for Linux Desktop" href="us/download/home/detail/family/71" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'Title']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'Title']);">ESET NOD32 Antivirus<br/>for Linux Desktop</a></h2> <p>Antivirus | Antispyware</p> </div> <div class="os"> <p class="linux">Linux</p> </div> <div class="btn"> <a class="btn_blue_down" href="us/download/home/detail/family/71" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'TryNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'TryNow']);"> I already purchased </a> <div><div style="margin-bottom:5px"> </div><a href="/us/download/home/detail/family/5/?trl=el" class="btn_blue_down" onClick="s.tl(this,'o','Download Trial EAV for Linux Button');">I want a free trial</a></div> </div> <div class="l"> <a style="background-image:url('fileadmin/templates/img/ico_l_buy.png');" href="http://www.eset.com/us/store/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'BuyNow']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'BuyNow']);"> Buy now </a> <a style="background-image:url('fileadmin/templates/img/ico_l_info.png');" href="us/home/products/nod32-for-linux/" onclick="_gaq.push(['local._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'LearnMore']);_gaq.push(['global._trackEvent', 'Download - us', 'ESET NOD32 Antivirus for Linux Desktop', 'LearnMore']);"> Learn more </a> <div> </div> </div> </div> <div class="divider_padding"><div class="divider"><hr /></div></div> </div> <div class="sec"> <div class="area3"> <h3 class="support"><a href="http://kb.eset.com">Technical support</a></h3> <p>Visit the ESET Knowledgebase to find the quickest solutions to the most common questions. From there you can also view video tutorials, access documentation and contact ESET Customer Care.</p> <a class="all" href="http://kb.eset.com">Learn more</a> </div> <div class="area3"> <h3 class="doc"><a href="/us/resource/papers/white-papers/">Reference Materials</a></h3> <p>Download white papers, data sheets, presentations and more. Also find independent tests, product reviews and links to industry resources.</p> <a class="all" href="/us/resource/papers/white-papers/">Learn more</a> </div> <div class="area3"> <h3 class="scan"><a href="http://blog.eset.com/">ESET Threat Blog</a></h3> <p>Keep up to date on the latest threats and malware by reading the ESET Researchers’ blog. Also available as an RSS feed.</p> <a class="all" href="http://blog.eset.com/">Learn more</a> </div> </div> </div> </div></div></div><div class="area1"><div style="margin-top:20px; border-radius:5px; font-size:12px; -moz-border-radius:5px; border:1px solid #E6E9EF; padding:15px 20px; background-color:#F6F8F9;line-height:20px; overflow:hidden"> <strong> Important: </strong> Before the installation we recommend you uninstall all other security solutions, including older versions of ESET. <a target="_blank" href="http://kb.eset.com/esetkb/index?page...SOLN146">Click here</a> to learn more. </div> <p> </p> </div><div id="c178630" class="csc-default" ><!-- Google Code for Download - Home Remarketing List --> <script type="text/javascript"> /* <![CDATA[ */ var google_conversion_id = 1028393326; var google_conversion_language = "en"; var google_conversion_format = "3"; var google_conversion_color = "ffffff"; var google_conversion_label = "anfWCLLz6wMQ7pKw6gM"; var google_conversion_value = 0; /* ]]> */ </script> <script type="text/javascript" src="http://www.googleadservices.com/pagead/conversion.js"> </script> <noscript> <div style="display:inline;"> <img height="1" width="1" style="border-style:none;" alt="" src="http:// www.googleadservices.com/pagead/conversion/1028393326/? value=0&label=anfWCLLz6wMQ7pKw6gM&guid=ON&script=0"/> </div> </noscript></div></div> </div> <div id="bottom"><div id="atom-eset-footer-index"> <script type="text/javascript"> </script> <div class="oldarea"> <div class="path pathOld"> <a title="US" href="us/">ESET</a> <span class="sep"> > </span> <a title="Download" href="us/download/home/">Download</a> <span class="sep"> > </span> <em> For Home </em> </div> <div class="f_area"> <p class="q"> <strong>Quick Links:</strong> <a title="Store" href="http://go.eset.com/us/store">Store</a> <span class="sep"> | </span> <a title="Renew" href="http://go.eset.com/us/renew">Renew</a> <span class="sep"> | </span> <a title="Activate" href="http://go.eset.com/us/activate">Activate</a> <span class="sep"> | </span> <a title="Free Trial" href="http://www.eset.com/us/download/free-trial/">Free Trial</a> <span class="sep"> | </span> <a title="Online Scanner" href="us/online-scanner/">Online Scanner</a> <span class="sep"> | </span> <a title="ESET vs. Competition" href="us/home/whyeset/compare/">ESET vs. Competition</a> <span class="sep"> | </span> <a title="Press Center" href="http://www.eset.com/us/presscenter/p...leases/">Press Center</a> <span class="sep"> | </span> <a title="Blog" href="http://blog.eset.com/">Blog</a> <span class="sep"> | </span> <a title="Threat Center" href="us/threat-center/">Threat Center</a> <span class="sep"> | </span> <a title="Support" href="http://kb.eset.com">Support</a> </p> <form id="chooseProductForm" method="get" action="http://www.eset.com/us/download/home/" onsubmit="if ($('productOption').getValue() != 'do not redirect') submitProductForm(); return false;"> <fieldset> <label> <strong>All products:</strong> <select id="productOption" onchange="if ($('productOption').getValue() != 'do not redirect') submitProductForm();"> <option value="do not redirect" selected="selected">Select product</option> <option value='us/home/products/smart-security/'>ESET Smart Security</option> <option value='us/home/products/antivirus/'>ESET NOD32 Antivirus</option> <option value='us/home/products/nod32-for-linux/'>ESET NOD32 Antivirus 4 for Linux</option> <option value='us/home/products/antivirus-for-mac/'>ESET Cybersecurity for Mac</option> <option value='us/home/products/mobile-security/'>ESET Mobile Security</option> <option value='us/home/products/family-security-pack/'>ESET Family Security Pack</option> <option value='us/business/products/antivirus/'>ESET Endpoint Antivirus</option> <option value='us/business/products/security/'>ESET Endpoint Security</option> <option value='us/business/products/antivirus-for-mac/'>ESET NOD32 Antivirus Business Edition for Mac OS X</option> <option value='us/business/products/remote-administrator/'>ESET Remote Administrator</option> <option value='us/business/products/mail-exchange/'>ESET Mail Security for Microsoft Exchange Server</option> <option value='us/business/products/mail-lotus/'>ESET Mail Security for IBM Lotus Domino</option> <option value='us/business/products/mail-linux/'>ESET Mail Security for Linux / BSD / Solaris</option> <option value='us/business/products/mail-kerio/'>ESET NOD32 Antivirus for Kerio Connect</option> <option value='us/business/products/file-windows/'>ESET NOD32 Antivirus for Windows File Server</option> <option value='us/business/products/file-linux/'>ESET File Security for Linux / BSD / Solaris</option> <option value='us/business/products/gateway-linux/'>ESET Gateway Security for Linux / BSD / Solaris</option> <option value='us/business/products/gateway-kerio/'>ESET NOD32 Antivirus for Kerio Control</option> <option value='us/online-scanner/'>ESET Online Scanner</option> <option value='us/download/utilities/'>ESET SysInspector</option> </select> </label> <input type="hidden" value="1" name="productdd" /> <input type="submit" class="input_submit" value="Go" /> </fieldset> </form> </div> <div class="bottom_area"> <div class="bl"> <p class="b_menu"> <a title="Contact" href="us/about/contact/">Contact</a> <span class="sep"> | </span> <a title="Privacy" href="us/privacy/">Privacy</a> <span class="sep"> | </span> <a title="Legal Information" href="us/legal-information/">Legal Information</a> <span class="sep"> | </span> <a title="Return Policy" href="us/return-policy/">Return Policy</a> <span class="sep"> | </span> <a title="Sitemap" href="us/sitemap/">Sitemap</a> </p> <p class="copy"> © 2012 ESET North America. All rights reserved. Trademarks used herein are trademarks or registered trademarks of ESET spol. s r.o. or ESET North America. All other names and brands are registered trademarks of their respective companies. </p> </div> <div style="display: none; right: 116px;" class="pop" id="bottom-pop-113"> <div class="pop_top"></div> <div class="pop_center"> <div> <img class=" img_right" alt="Facebook" title="" width="40" height="40" src="http://static1.int.esetstatic.com/up...acebook_25.png" /> <div><p class="bodytext">Join our facebook fan site!</p></div> </div> </div> <div class="pop_bottom"></div> </div> <div style="display: none; right: 96px;" class="pop" id="bottom-pop-240"> <div class="pop_top"></div> <div class="pop_center"> <div> <img class=" img_right" alt="Google+" title="" width="32" height="32" src="http://static1.int.esetstatic.com/up...e/gplus-32.png" /> <div><p class="bodytext">Visit the official ESET USA Google+ Page.</p></div> </div> </div> <div class="pop_bottom"></div> </div> <div style="display: none; right: 76px;" class="pop" id="bottom-pop-112"> <div class="pop_top"></div> <div class="pop_center"> <div> <img class=" img_right" alt="Twitter" title="" width="40" height="40" src="http://static5.int.esetstatic.com/up...twitter_25.png" /> <div><p class="bodytext">Visit the official ESET Twitter page.</p></div> </div> </div> <div class="pop_bottom"></div> </div> <div style="display: none; right: 56px;" class="pop" id="bottom-pop-114"> <div class="pop_top"></div> <div class="pop_center"> <div> <img class=" img_right" alt="YouTube" title="" width="40" height="40" src="http://static2.int.esetstatic.com/up...youtube_25.png" /> <div><p class="bodytext">Watch our videos at the official ESET YouTube Channel.</p></div> </div> </div> <div class="pop_bottom"></div> </div> <div style="display: none; right: 36px;" class="pop" id="bottom-pop-268"> <div class="pop_top"></div> <div class="pop_center"> <div> <img class=" img_right" alt="LinkedIn" title="" width="42" height="42" src="http://static4.int.esetstatic.com/up...icon_42x42.png" /> <div><p class="bodytext">Connect with ESET North America on LinkedIn.</p></div> </div> </div> <div class="pop_bottom"></div> </div> <div style="display: none; right: 16px;" class="pop" id="bottom-pop-111"> <div class="pop_top"></div> <div class="pop_center"> <div> <img class=" img_right" alt="RSS" title="" width="40" height="40" src="http://static2.int.esetstatic.com/up...ico_rss_25.png" /> <div><p class="bodytext">Receive regular updates from the ESET Press Center.</p></div> </div> </div> <div class="pop_bottom"></div> </div> <div class="icons"> <a href="http://www.facebook.com/esetusa" onclick="recordOutboundLink(this, 'Clicks', 'Facebook', '', 0, '1'); return false;" title="" id="bottom-icon-113"><img title="" alt="" width="16" height="16" src="http://static3.int.esetstatic.com/up...acebook_28.gif" /></a> <a href="https://plus.google.com/100120447453...51568551/posts" onclick="recordOutboundLink(this, 'Clicks', 'Google+', '', 0, '1'); return false;" title="" id="bottom-icon-240"><img title="" alt="" width="16" height="16" src="http://static1.int.esetstatic.com/up...us_icon_01.png" /></a> <a href="https://twitter.com/eset" onclick="recordOutboundLink(this, 'Clicks', 'Twitter', '', 0, '1'); return false;" title="" id="bottom-icon-112"><img title="" alt="" width="16" height="16" src="http://static3.int.esetstatic.com/up...wistter_27.gif" /></a> <a href="http://www.youtube.com/esetusa" onclick="recordOutboundLink(this, 'Clicks', 'YouTube', '', 0, '1'); return false;" title="" id="bottom-icon-114"><img title="" alt="" width="16" height="16" src="http://static1.int.esetstatic.com/up...youtube_28.gif" /></a> <a href="http://www.linkedin.com/company/esetnorthamerica" onclick="recordOutboundLink(this, 'Clicks', 'LinkedIn', '', 0, '1'); return false;" title="" id="bottom-icon-268"><img title="" alt="" width="16" height="16" src="http://static2.int.esetstatic.com/up...edin-16x16.png" /></a> <a href="http://www.eset.com/us/rss" onclick="recordOutboundLink(this, 'Clicks', 'RSS', '', 0, '1'); return false;" title="" id="bottom-icon-111"><img title="" alt="" width="16" height="16" src="http://static2.int.esetstatic.com/up...ico_rss_27.gif" /></a> </div> </div> <div class="clear"></div> <script type="text/javascript"> $('bottom-icon-113').observe('mouseenter',function(ev){$('bottom-pop-113').show(); }); $('bottom-icon-113').observe('mouseleave',function(ev){$('bottom-pop-113').hide(); }); $('bottom-icon-240').observe('mouseenter',function(ev){$('bottom-pop-240').show(); }); $('bottom-icon-240').observe('mouseleave',function(ev){$('bottom-pop-240').hide(); }); $('bottom-icon-112').observe('mouseenter',function(ev){$('bottom-pop-112').show(); }); $('bottom-icon-112').observe('mouseleave',function(ev){$('bottom-pop-112').hide(); }); $('bottom-icon-114').observe('mouseenter',function(ev){$('bottom-pop-114').show(); }); $('bottom-icon-114').observe('mouseleave',function(ev){$('bottom-pop-114').hide(); }); $('bottom-icon-268').observe('mouseenter',function(ev){$('bottom-pop-268').show(); }); $('bottom-icon-268').observe('mouseleave',function(ev){$('bottom-pop-268').hide(); }); $('bottom-icon-111').observe('mouseenter',function(ev){$('bottom-pop-111').show(); }); $('bottom-icon-111').observe('mouseleave',function(ev){$('bottom-pop-111').hide(); }); function submitProductForm() { el = $('chooseProductForm'); el.writeAttribute('action', $('productOption').getValue()); el.submit(); } </script> <div id="countries-popup" class="countries" style="display:none;"> <form action=""><fieldset><input type="text" /></fieldset></form> <div class="cont"> <div class="warp"> <ul class="fade"> <li class="sel"> <a class="fade-1" href="#">North America</a> </li> <li> <a class="fade-2" href="#">Europe</a> </li> <li> <a class="fade-3" href="#">Latin America</a> </li> <li> <a class="fade-4" href="#">Asia</a> </li> <li> <a class="fade-5" href="#">Australia and Oceania</a> </li> <li> <a class="fade-6" href="#">Africa</a> </li> </ul><span id="arrow"></span></div> </div> <div class="state"> <a href="#" class="close" title="close"><span class="hdn">Close</span></a> <div class="clear"></div> <div class="fade fade-1"> <ul> <li class="act def"> <a href="http://www.eset.com/us/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'United States and Canada',0);return false;">United States and Canada</a></li> </ul> </div> <div class="fade fade-2 hidden"> <ul> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Armenia',0);return false;">Armenia</a></li> <li> <a href="http://www.eset.at/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Austria',0);return false;">Austria</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Azerbaijan',0);return false;">Azerbaijan</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Belarus',0);return false;">Belarus</a></li> <li> <a href="http://www.nod32.lu/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Belgium',0);return false;">Belgium</a></li> <li> <a href="http://www.nod32adria.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Bosnia and Herzegovina',0);return false;">Bosnia and Herzegovina</a></li> <li> <a href="http://www.eset.com/bg/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Bulgaria',0);return false;">Bulgaria</a></li> <li> <a href="http://www.nod32.com.hr/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Croatia',0);return false;">Croatia</a></li> <li> <a href="http://www.eset.com/gr-en" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Cyprus',0);return false;">Cyprus</a></li> <li> <a href="http://www.eset.cz" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Czech Republic',0);return false;">Czech Republic</a></li> <li> <a href="http://www.nod32denmark.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Denmark',0);return false;">Denmark</a></li> </ul> <ul> <li> <a href="http://www.eset.ee/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Estonia',0);return false;">Estonia</a></li> <li> <a href="http://www.esetfinland.fi/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Finland',0);return false;">Finland</a></li> <li> <a href="http://www.eset.com/fr/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'France',0);return false;">France</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Georgia',0);return false;">Georgia</a></li> <li> <a href="http://www.eset.com/de/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Germany',0);return false;">Germany</a></li> <li> <a href="http://www.eset.com/gr" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Greece',0);return false;">Greece</a></li> <li> <a href="http://www.nod32.hu/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Hungary',0);return false;">Hungary</a></li> <li> <a href="http://www.nod32iceland.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Iceland',0);return false;">Iceland</a></li> <li> <a href="http://www.eset.ie/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Ireland',0);return false;">Ireland</a></li> <li> <a href="http://www.nod32.it/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Italy',0);return false;">Italy</a></li> <li> <a href="http://www.eset.lv/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Latvia',0);return false;">Latvia</a></li> </ul> <ul> <li> <a href="http://www.nod32.lt/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Lithuania',0);return false;">Lithuania</a></li> <li> <a href="http://www.nod32.lu/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Luxembourg',0);return false;">Luxembourg</a></li> <li> <a href="http://www.nod32adria.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Macedonia',0);return false;">Macedonia</a></li> <li> <a href="http://www.eset.com/partners/malta" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Malta',0);return false;">Malta</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Moldova',0);return false;">Moldova</a></li> <li> <a href="http://www.nod32.nl/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Netherlands',0);return false;">Netherlands</a></li> <li> <a href="http://www.nod32norway.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Norway',0);return false;">Norway</a></li> <li> <a href="http://www.eset.pl/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Poland',0);return false;">Poland</a></li> <li> <a href="http://www.eset.com/pt/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Portugal',0);return false;">Portugal</a></li> <li> <a href="http://www.nod32.ro/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Romania',0);return false;">Romania</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Russia',0);return false;">Russia</a></li> </ul> <ul> <li> <a href="http://www.nod32adria.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Serbia and Montenegro',0);return false;">Serbia and Montenegro</a></li> <li> <a href="http://www.eset.com/sk" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Slovakia',0);return false;">Slovakia</a></li> <li> <a href="http://www.nod32.si/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Slovenia',0);return false;">Slovenia</a></li> <li> <a href="http://www.nod32-es.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Spain',0);return false;">Spain</a></li> <li> <a href="http://www.nod32sweden.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Sweden',0);return false;">Sweden</a></li> <li> <a href="http://www.eset.com/ch-en/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Switzerland',0);return false;">Switzerland</a></li> <li> <a href="http://www.eset.com/tr/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Turkey',0);return false;">Turkey</a></li> <li> <a href="http://eset.com.ua/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Ukraine',0);return false;">Ukraine</a></li> <li> <a href="http://www.eset.co.uk" onclick="recordOutboundLink(this, 'Language selector', 'us', 'United Kingdom',0);return false;">United Kingdom</a></li> </ul> </div> <div class="fade fade-3 hidden"> <ul> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Argentina',0);return false;">Argentina</a></li> <li> <a href="http://www.eset.com/partners/aruba" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Aruba',0);return false;">Aruba</a></li> <li> <a href="http://www.eset.com/partners/barbados" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Barbados',0);return false;">Barbados</a></li> <li> <a href="http://www.eset.com/partners/belize" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Belize',0);return false;">Belize</a></li> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Bolivia',0);return false;">Bolivia</a></li> <li> <a href="http://www.eset.com.br" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Brazil',0);return false;">Brazil</a></li> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Colombia',0);return false;">Colombia</a></li> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Costa Rica',0);return false;">Costa Rica</a></li> <li> <a href="http://www.eset-la.com" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Dominican Republic',0);return false;">Dominican Republic</a></li> <li> <a href="http://www.eset.com.ec/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Ecuador',0);return false;">Ecuador</a></li> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'El Salvador',0);return false;">El Salvador</a></li> </ul> <ul> <li> <a href="http://www.eset.com.gt/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Guatemala',0);return false;">Guatemala</a></li> <li> <a href="http://www.eset.com.hn/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Honduras',0);return false;">Honduras</a></li> <li> <a href="http://www.eset.cl/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Chile',0);return false;">Chile</a></li> <li> <a href="http://www.eset.com.mx/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Mexico',0);return false;">Mexico</a></li> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Nicaragua',0);return false;">Nicaragua</a></li> <li> <a href="http://www.eset.com.pa/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Panama',0);return false;">Panama</a></li> <li> <a href="http://www.eset-la.com" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Paraguay',0);return false;">Paraguay</a></li> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Peru',0);return false;">Peru</a></li> <li> <a href="http://www.eset.com/partners/suriname" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Suriname',0);return false;">Suriname</a></li> <li> <a href="http://www.eset.com/partners/Trinidad-and-Tobago" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Trinidad and Tobago',0);return false;">Trinidad and Tobago</a></li> <li> <a href="http://www.eset.com.uy/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Uruguay',0);return false;">Uruguay</a></li> </ul> <ul> <li> <a href="http://www.eset-la.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Venezuela',0);return false;">Venezuela</a></li> </ul> </div> <div class="fade fade-4 hidden"> <ul> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Bahrain',0);return false;">Bahrain</a></li> <li> <a href="http://www.eset.com/partners/bangladesh/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Bangladesh',0);return false;">Bangladesh</a></li> <li> <a href="http://www.eset.com/partners/bhutan" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Bhutan',0);return false;">Bhutan</a></li> <li> <a href="http://www.eset.com/partners/brunei" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Brunei',0);return false;">Brunei</a></li> <li> <a href="http://www.nod32.com.hk/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Hong Kong',0);return false;">Hong Kong</a></li> <li> <a href="http://www.eset.com.kh" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Cambodia',0);return false;">Cambodia</a></li> <li> <a href="http://www.nod32cn.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'China',0);return false;">China</a></li> <li> <a href="http://www.esetindia.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'India',0);return false;">India</a></li> <li> <a href="http://www.eset.co.id/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Indonesia',0);return false;">Indonesia</a></li> <li> <a href="http://www.eset.co.il/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Israel',0);return false;">Israel</a></li> <li> <a href="http://www.canon-sol.jp/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Japan',0);return false;">Japan</a></li> </ul> <ul> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Jordan',0);return false;">Jordan</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Kazakhstan',0);return false;">Kazakhstan</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Kuwait',0);return false;">Kuwait</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Kyrgyzstan',0);return false;">Kyrgyzstan</a></li> <li> <a href="http://www.eset.com/partners/laos" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Laos',0);return false;">Laos</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Lebanon',0);return false;">Lebanon</a></li> <li> <a href="http://www.eset.com/partners/malaysia/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Malaysia',0);return false;">Malaysia</a></li> <li> <a href="http://www.getnod32.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Maldives',0);return false;">Maldives</a></li> <li> <a href="http://www.eset.com/partners/mongolia" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Mongolia',0);return false;">Mongolia</a></li> <li> <a href="http://www.eset.com/partners/myanmar/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Myanmar',0);return false;">Myanmar</a></li> <li> <a href="http://www.eset.com/partners/nepal" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Nepal',0);return false;">Nepal</a></li> </ul> <ul> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Oman',0);return false;">Oman</a></li> <li> <a href="http://www.eset.com/partners/pakistan" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Pakistan',0);return false;">Pakistan</a></li> <li> <a href="http://www.eset.com/ph/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Philippines',0);return false;">Philippines</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Qatar',0);return false;">Qatar</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Saudi Arabia',0);return false;">Saudi Arabia</a></li> <li> <a href="http://www.nod32.com.sg/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Singapore',0);return false;">Singapore</a></li> <li> <a href="http://www.eset.com/partners/south-korea/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'South Korea',0);return false;">South Korea</a></li> <li> <a href="http://www.eset.com/partners/sri-lanka/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Sri Lanka',0);return false;">Sri Lanka</a></li> <li> <a href="http://www.nod32tw.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Taiwan',0);return false;">Taiwan</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Tajikistan',0);return false;">Tajikistan</a></li> <li> <a href="http://www.nod32th.com/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Thailand',0);return false;">Thailand</a></li> </ul> <ul> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Turkmenistan',0);return false;">Turkmenistan</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'United Arab Emirates',0);return false;">United Arab Emirates</a></li> <li> <a href="http://www.esetnod32.ru/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Uzbekistan',0);return false;">Uzbekistan</a></li> <li> <a href="http://www.eset.com.vn" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Vietnam',0);return false;">Vietnam</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Yemen',0);return false;">Yemen</a></li> </ul> </div> <div class="fade fade-5 hidden"> <ul> <li> <a href="http://eset.com.au/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Australia',0);return false;">Australia</a></li> <li> <a href="http://www.nod32.co.nz/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'New Zealand',0);return false;">New Zealand</a></li> </ul> </div> <div class="fade fade-6 hidden"> <ul> <li> <a href="http://www.eset.com/dz" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Algeria',0);return false;">Algeria</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Angola',0);return false;">Angola</a></li> <li> <a href="http://www.eset.com/bj" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Benin',0);return false;">Benin</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Botswana',0);return false;">Botswana</a></li> <li> <a href="http://www.eset.com/bf" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Burkina Faso',0);return false;">Burkina Faso</a></li> <li> <a href="http://www.eset.com/bf/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Burundi',0);return false;">Burundi</a></li> <li> <a href="http://www.eset.com/cm" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Cameroon',0);return false;">Cameroon</a></li> <li> <a href="http://www.eset.com/cf/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Central African Republic',0);return false;">Central African Republic</a></li> <li> <a href="http://www.eset.com/cg/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Congo',0);return false;">Congo</a></li> <li> <a href="http://www.eset.com/ci/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Cote D’Ivoire',0);return false;">Cote D’Ivoire</a></li> <li> <a href="http://www.eset.com/dj/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Djibuti',0);return false;">Djibuti</a></li> </ul> <ul> <li> <a href="http://www.eset.com/cd/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Democratic Republic of the Congo',0);return false;">Democratic Republic of the Congo</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Egypt',0);return false;">Egypt</a></li> <li> <a href="http://www.eset.com/partners/ethiopia" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Ethiopia',0);return false;">Ethiopia</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Equatorial Guinea',0);return false;">Equatorial Guinea</a></li> <li> <a href="http://www.eset.com/ga/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Gabon',0);return false;">Gabon</a></li> <li> <a href="http://www.eset.com/ng" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Ghana',0);return false;">Ghana</a></li> <li> <a href="http://www.eset.com/gn/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Guinea',0);return false;">Guinea</a></li> <li> <a href="http://www.eset.com/td/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Chad',0);return false;">Chad</a></li> <li> <a href="http://www.eset.co.ke/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Kenya',0);return false;">Kenya</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Lesotho',0);return false;">Lesotho</a></li> <li> <a href="http://www.eset.com/me" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Libya',0);return false;">Libya</a></li> </ul> <ul> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Madagascar',0);return false;">Madagascar</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Malawi',0);return false;">Malawi</a></li> <li> <a href="http://www.eset.com/ml/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Mali',0);return false;">Mali</a></li> <li> <a href="http://www.eset.com/mr/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Mauritania',0);return false;">Mauritania</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Mauritius',0);return false;">Mauritius</a></li> <li> <a href="http://www.eset.com/ma/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Morocco',0);return false;">Morocco</a></li> <li> <a href="http://www.eset.co.mz" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Mozambique',0);return false;">Mozambique</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Namibia',0);return false;">Namibia</a></li> <li> <a href="http://www.eset.com/ne/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Niger',0);return false;">Niger</a></li> <li> <a href="http://www.eset.com/ng/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Nigeria',0);return false;">Nigeria</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Rwanda',0);return false;">Rwanda</a></li> </ul> <ul> <li> <a href="http://www.eset.com/sn/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Senegal',0);return false;">Senegal</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Seychelles',0);return false;">Seychelles</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'South Africa',0);return false;">South Africa</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Swaziland',0);return false;">Swaziland</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Tanzania',0);return false;">Tanzania</a></li> <li> <a href="http://www.eset.com/tg/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Togo',0);return false;">Togo</a></li> <li> <a href="http://www.eset.com/tn/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Tunisia',0);return false;">Tunisia</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Uganda',0);return false;">Uganda</a></li> <li> <a href="http://www.eset.com/za/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Zambia',0);return false;">Zambia</a></li> <li> <a href="http://www.eset.com/partners/zimbabwe/" onclick="recordOutboundLink(this, 'Language selector', 'us', 'Zimbabwe',0);return false;">Zimbabwe</a></li> </ul> </div> <div class="inter"> <a href="http://www.eset.com/" id="country_int">International (English)</a> </div> </div> </div> </div> <div id="bottom_print"><p>ESET – globálna centrála, Aupark Tower, Einsteinova 24, 851 01 Bratislava, Slovenská republika, Spojovateľka: +421 (2) 322 44 111</p> <p>Obchodné oddelenie: +421 (2) 322 44 250 (obchod@eset.sk), Fax: +421 (2) 322 44 109</p> <p><strong>Technická podpora: +421 (2) 322 44 444</strong></p> </div></div></div> </div> </div> <script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['global._setAccount', 'UA-160836-30'], ['global._setAllowLinker', true], ['global._setDomainName', '.eset.com'], ['global._trackPageview'], ['local._setAccount', 'UA-32126-1'], ['local._setAllowLinker', true], ['local._setDomainName', '.eset.com'], ['local._trackPageview']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); </script><!-- SiteCatalyst code version: H.21.1. Copyright 1996-2010 Adobe, Inc. All Rights Reserved More info available at http://www.omniture.com --> <script type="text/javascript" src="http://go.eset.com/us/scripts/lib/s_code_2.js"></script> <script type="text/javascript"><!-- /* You may give each page an identifying name, server, and channel on the next lines. */ s.pageName=""; s.server=""; s.channel=""; s.pageType=""; s.prop1=""; s.prop2=""; s.prop3=""; s.prop4=""; s.prop5=""; /* Conversion Variables */ s.campaign=""; s.state=""; s.zip=""; s.events=""; s.products=""; s.purchaseID=""; s.eVar1=""; s.eVar2=""; s.eVar3=""; s.eVar4=""; s.eVar5=""; /************* DO NOT ALTER ANYTHING BELOW THIS LINE ! **************/ var s_code=s.t();if(s_code)document.write(s_code)//--></script> <script type="text/javascript"><!-- if(navigator.appVersion.indexOf('MSIE')>=0)document.write(unescape('%3C')+' \!-'+'-') //--></script><noscript><div><img src="http://eset.122.2o7.net/b/ss/esetprod/1/H.21.1--NS/0" height="1" width="1" alt="" /></div></noscript><!--/DO NOT REMOVE/--> <!-- End SiteCatalyst code version: H.21.1. --> <!-- Eloqua --> <script type="text/javascript" src="http://go.eset.com/us/scripts/elqNow...g.js"></script> <script type="text/javascript" src="http://go.eset.com/us/scripts/elqNow...g.js"></script> <!-- End Eloqua --><!-- <ul id="autocompleter-choices" class="autocompleter-choices" style="z-index: 1000; left: 1117px; top: 73px; width: 196px; overflow-y: hidden; display: block;"></ul> <script type="text/javascript" src="/us/scripts/lib/mootools-1.2.5-core-yc.js"></script><script type="text/javascript" src="/us/scripts/lib/mootools-1.2.5.1-more.js"></script><script type="text/javascript" src="/us/scripts/download.js"></script><script type="text/javascript" src="/us/scripts/lib/autocompleter/Autocompleter.js"></script><script type="text/javascript" src="/us/request/jsonp/topsearches.js"></script> <script type="text/javascript"> document.observe('dom:loaded', function() { $('search-target').setAttribute('name','search-target'); new Autocompleter.Local('search-target', 'autocompleter-choices', __topsearches, { /* 'autocompleter-choices', */ 'zIndex': 1000, 'delay': 100, 'topOffset': 3, 'leftOffset': 2, 'width': '196px', 'fullSearch': true, onChoice: function() { $('search_form').submit(); } }); }); </script> --> </body> </html><!-- from cache 2012-07-03T00:58:47+02:00 --> |
|
02-Jul-2012, 08:49 PM
#39 |
| I have no idea what I sent you. It was listed at the top of the scan under a notebook. I looked for both of the suggestions you gave me, but the computer said that they couldn't be found. Sorry I just don't understand all of this. |
03-Jul-2012, 05:53 PM
#40 | ||||||
| Let's try this one instead as that means nothing to me either. Please run the F-Secure Online Scanner Note: You must use Internet Explorer for this scan!
__________________ Microsoft MVP - Consumer Security |
|
03-Jul-2012, 08:48 PM
#41 |
| Scanning Report Tuesday, July 3, 2012 17:03:34 - 17:46:54 Computer name: DB85P4G1 Scanning type: Scan system for malware, spyware and rootkits Target: C:\ 14 malware found TrackingCookie.Questionmarket (spyware)
Scanned:
Scanning engines: Scanning options:
|
04-Jul-2012, 05:52 PM
#42 | ||||||
| Download OTS.exe to your Desktop.
__________________ Microsoft MVP - Consumer Security |
|
05-Jul-2012, 01:14 AM
#43 |
| Code: OTS logfile created on: 7/4/2012 9:50:40 PM - Run 1 OTS by OldTimer - Version 3.1.47.2 Folder = C:\Documents and Settings\Elaine Strean\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 75.00% Memory free 4.00 Gb Paging File | 3.00 Gb Available in Paging File | 83.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 148.96 Gb Total Space | 128.38 Gb Free Space | 86.18% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DB85P4G1 Current User Name: Elaine Strean Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days [Processes - Safe List] ots.exe -> C:\Documents and Settings\Elaine Strean\Desktop\OTS.exe -> [2012/07/04 21:48:34 | 000,646,656 | ---- | M] (OldTimer Tools) superantispyware.exe -> C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe -> [2012/06/26 10:33:03 | 003,906,432 | ---- | M] (SUPERAntiSpyware.com) jqs.exe -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -> [2012/05/04 19:29:46 | 000,161,664 | ---- | M] (Oracle Corporation) sascore.exe -> C:\Program Files\SUPERAntiSpyware\SASCore.exe -> [2011/08/11 16:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) coreserviceshell.exe -> C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe -> [2011/02/16 16:26:04 | 000,188,272 | ---- | M] (Trend Micro Inc.) uiwatchdog.exe -> C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe -> [2011/02/10 07:00:24 | 000,116,752 | ---- | M] (Trend Micro Inc.) uiseagnt.exe -> C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe -> [2011/02/10 06:57:40 | 001,035,512 | ---- | M] (Trend Micro Inc.) coreframeworkhost.exe -> C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe -> [2010/08/08 03:35:32 | 000,138,640 | ---- | M] (Trend Micro Inc.) hstrans.exe -> C:\Program Files\National Consumer Panel\NCP Internet Transporter\HSTrans.exe -> [2009/12/11 13:17:56 | 002,113,536 | ---- | M] (NCP) explorer.exe -> C:\WINDOWS\explorer.exe -> [2007/06/13 03:23:07 | 001,033,216 | ---- | M] (Microsoft Corporation) aolhos~1.exe -> C:\Program Files\Common Files\AOL\1208987670\EE\AOLHostManager.exe -> [2004/11/03 14:03:00 | 000,125,528 | ---- | M] (America Online, Inc.) aolservicehost.exe -> C:\Program Files\Common Files\AOL\1208987670\EE\AOLServiceHost.exe -> [2004/11/03 14:03:00 | 000,110,680 | ---- | M] (America Online, Inc.) aolacsd.exe -> C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe -> [2004/10/20 06:40:04 | 000,010,328 | R--- | M] (America Online) aoltsmon.exe -> C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe -> [2004/10/15 13:54:14 | 000,100,016 | ---- | M] (America Online, Inc) aoltpspd.exe -> C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe -> [2004/10/15 13:54:12 | 000,046,768 | ---- | M] (America Online Inc) [Modules - No Company Name] sd10006.dll -> C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll -> [2012/07/04 21:31:49 | 000,065,024 | ---- | M] () sd10007.dll -> C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll -> [2012/07/04 21:31:49 | 000,052,736 | ---- | M] () uirepair.dll -> C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL -> [2012/06/29 14:36:55 | 000,117,760 | ---- | M] () sd10005.dll -> C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll -> [2012/06/29 14:36:55 | 000,052,224 | ---- | M] () libprotobuf.dll -> C:\Program Files\Trend Micro\AMSP\libprotobuf.dll -> [2010/08/08 03:35:32 | 001,081,344 | ---- | M] () sqlite3.dll -> C:\Program Files\Trend Micro\AMSP\sqlite3.dll -> [2010/08/08 03:35:32 | 000,442,368 | ---- | M] () boost_date_time-vc80-mt-1_36.dll -> C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_36.dll -> [2010/08/08 03:35:32 | 000,057,344 | ---- | M] () boost_thread-vc80-mt-1_36.dll -> C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_36.dll -> [2010/08/08 03:35:32 | 000,049,152 | ---- | M] () luadll.dll -> C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll -> [2010/08/08 03:04:30 | 000,174,432 | ---- | M] () libexpat.dll -> C:\Program Files\Common Files\AOL\1208987670\EE\libexpat.dll -> [2004/11/03 14:03:00 | 000,143,360 | ---- | M] () c4dll.dll -> C:\Program Files\National Consumer Panel\NCP Internet Transporter\c4dll.dll -> [2004/07/19 13:06:58 | 000,520,192 | ---- | M] () ssleay32.dll -> C:\Program Files\National Consumer Panel\NCP Internet Transporter\ssleay32.dll -> [2003/05/28 08:55:30 | 000,155,648 | ---- | M] () libeay32.dll -> C:\Program Files\National Consumer Panel\NCP Internet Transporter\libeay32.dll -> [2003/05/28 08:55:28 | 000,684,032 | ---- | M] () zlib.dll -> C:\Program Files\National Consumer Panel\NCP Internet Transporter\zlib.dll -> [2002/09/12 09:29:46 | 000,057,344 | ---- | M] () pihook.dll -> C:\Program Files\ArcSoft\Software Suite\PhotoImpression\Share\PIHook.dll -> [2002/07/03 17:38:00 | 000,053,248 | ---- | M] () [Win32 Services - Safe List] (HidServ) Human Interface Device Access [Disabled | Stopped] -> -> File not found (AppMgmt) Application Management [On_Demand | Stopped] -> -> File not found (AdobeFlashPlayerUpdateSvc) Adobe Flash Player Update Service [On_Demand | Stopped] -> C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -> [2012/06/13 17:54:19 | 000,257,224 | ---- | M] (Adobe Systems Incorporated) (JavaQuickStarterService) Java Quick Starter [Auto | Running] -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -> [2012/05/04 19:29:46 | 000,161,664 | ---- | M] (Oracle Corporation) (!SASCORE) SAS Core Service [Auto | Running] -> C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -> [2011/08/11 16:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) (Amsp) Trend Micro Solution Platform [Auto | Running] -> C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe -> [2011/02/16 16:26:04 | 000,188,272 | ---- | M] (Trend Micro Inc.) (AOL ACS) AOL Connectivity Service [Auto | Running] -> C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe -> [2004/10/20 06:40:04 | 000,010,328 | R--- | M] (America Online) (AOL TopSpeedMonitor) AOL TopSpeed Monitor [Auto | Running] -> C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe -> [2004/10/15 13:54:14 | 000,100,016 | ---- | M] (America Online, Inc) [Driver Services - Safe List] (SASDIFSV) SASDIFSV [Kernel | System | Running] -> C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -> [2011/07/22 09:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) (SASKUTIL) SASKUTIL [Kernel | System | Running] -> C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -> [2011/07/12 14:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) (tmcomm) tmcomm [Kernel | Auto | Running] -> C:\WINDOWS\system32\drivers\tmcomm.sys -> [2010/08/08 03:35:34 | 000,189,520 | ---- | M] (Trend Micro Inc.) (tmtdi) Trend Micro TDI Driver [Kernel | System | Running] -> C:\WINDOWS\system32\drivers\tmtdi.sys -> [2010/08/08 03:35:34 | 000,092,112 | ---- | M] (Trend Micro Inc.) (tmactmon) tmactmon [Kernel | Auto | Running] -> C:\WINDOWS\system32\drivers\tmactmon.sys -> [2010/08/08 03:35:34 | 000,080,464 | ---- | M] (Trend Micro Inc.) (tmevtmgr) tmevtmgr [Kernel | Auto | Running] -> C:\WINDOWS\system32\drivers\tmevtmgr.sys -> [2010/08/08 03:35:34 | 000,064,080 | ---- | M] (Trend Micro Inc.) (FTDIBUS) USB Serial Converter Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\system32\drivers\ftdibus.sys -> [2009/02/17 05:19:00 | 000,057,672 | ---- | M] (FTDI Ltd.) (FTSER2K) USB Serial Port Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\system32\drivers\ftser2k.sys -> [2009/02/17 05:17:00 | 000,072,520 | ---- | M] (FTDI Ltd.) (ASCTRM) ASCTRM [Kernel | Auto | Running] -> C:\WINDOWS\System32\drivers\asctrm.sys -> [2008/04/23 14:55:04 | 000,008,552 | ---- | M] (Windows (R) 2000 DDK provider) (nvnetbus) NVIDIA Network Bus Enumerator [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\nvnetbus.sys -> [2008/04/06 19:29:14 | 000,022,016 | ---- | M] (NVIDIA Corporation) (NVENETFD) NVIDIA nForce Networking Controller Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\NVENETFD.sys -> [2008/04/06 19:29:08 | 000,054,400 | ---- | M] (NVIDIA Corporation) (IntcAzAudAddService) Service for Realtek HD Audio (WDM) [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\RtkHDAud.sys -> [2008/04/06 19:25:40 | 004,652,544 | ---- | M] (Realtek Semiconductor Corp.) (HSFHWBS2) HSFHWBS2 [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\HSFHWBS2.sys -> [2003/11/17 12:59:20 | 000,212,224 | ---- | M] (Conexant Systems, Inc.) (winachsf) winachsf [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\HSF_CNXT.sys -> [2003/11/17 12:58:02 | 000,680,704 | ---- | M] (Conexant Systems, Inc.) (HSF_DP) HSF_DP [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\HSF_DP.sys -> [2003/11/17 12:56:26 | 001,042,432 | ---- | M] (Conexant Systems, Inc.) (pfc) Padus ASPI Shell [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\pfc.sys -> [2003/09/19 16:45:48 | 000,021,248 | ---- | M] (Padus, Inc.) (wanatw) WAN Miniport (ATW) [Kernel | On_Demand | Running] -> C:\WINDOWS\system32\drivers\wanatw4.sys -> [2003/01/10 13:13:04 | 000,033,588 | R--- | M] (America Online, Inc.) [Registry - Safe List] < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Search\\"Default_Page_URL" -> www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=0080423 -> HKEY_LOCAL_MACHINE\: Search\\"Default_Search_URL" -> http://www.google.com/ie -> HKEY_LOCAL_MACHINE\: Search\\"Start Page" -> www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=0080423 -> HKEY_LOCAL_MACHINE\: SearchURL\\"" -> http://www.google.com/search?q=%s -> HKEY_LOCAL_MACHINE\: SearchURL\\"provider" -> gogl -> < Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> -> HKEY_USERS\.DEFAULT\: Main\\"Default_Page_URL" -> www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=0080423 -> HKEY_USERS\.DEFAULT\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> -> HKEY_USERS\S-1-5-18\: Main\\"Default_Page_URL" -> www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=0080423 -> HKEY_USERS\S-1-5-18\: "ProxyEnable" -> 0 -> < Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> -> < Internet Explorer Settings [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\: Main\\"SearchDefaultBranded" -> 1 -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\: Main\\"SearchMigratedDefaultName" -> Google -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\: Main\\"SearchMigratedDefaultURL" -> http://www.google.com/search?q={sear...e=utf8&oe=utf8 -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\: Main\\"Start Page" -> http://www.msn.com/?ocid=OIE8HP&PC=UP62 -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\: SearchURL\\"" -> http://www.google.com/search?q=%s -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\: "ProxyEnable" -> 0 -> < FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla HKLM\software\mozilla\Firefox\extensions -> -> HKLM\software\mozilla\Firefox\extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc} -> C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [C:\PROGRAM FILES\TREND MICRO\TITANIUM\UIFRAMEWORK\TOOLBAR\FIREFOXEXTENSION] -> [2011/12/19 11:45:06 | 000,000,000 | ---D | M] HKLM\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405} -> C:\PROGRAM FILES\TREND MICRO\AMSP\MODULE\20004\1.5.1505\6.6.1088\FIREFOXEXTENSION\ [C:\PROGRAM FILES\TREND MICRO\AMSP\MODULE\20004\1.5.1505\6.6.1088\FIREFOXEXTENSION\] -> [2012/03/20 11:29:48 | 000,000,000 | ---D | M] HKLM\software\mozilla\Firefox\extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF} -> C:\PROGRAM FILES\AVG\AVG2012\FIREFOX\DONOTTRACK\ [C:\PROGRAM FILES\AVG\AVG2012\FIREFOX\DONOTTRACK\] -> [2012/06/21 17:03:15 | 000,000,000 | ---D | M] < FireFox Extensions [User Folders] > -> < HOSTS File > ([2012/07/01 13:22:32 | 000,000,027 | ---- | M] - 1 lines) -> C:\WINDOWS\system32\drivers\etc\hosts -> Reset Hosts 127.0.0.1 localhost < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {02478D38-C3F9-4efb-9B51-7695ECA05670} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found {1CA1377B-DC1D-4A52-9585-6E06050FAC53} [HKLM] -> C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1505\6.6.1088\TmIEPlg.dll [TmIEPlugInBHO Class] -> [2010/07/20 09:02:12 | 000,185,680 | ---- | M] (Trend Micro Inc.) {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} [HKLM] -> [AVG Do Not Track] -> File not found {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found {43C6D902-A1C5-45c9-91F6-FD9E90337E18} [HKLM] -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [TSToolbarBHO] -> [2011/02/17 12:28:32 | 000,194,064 | ---- | M] (Trend Micro Inc.) {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [Java(tm) Plug-In SSV Helper] -> [2012/05/04 19:29:48 | 000,453,504 | ---- | M] (Oracle Corporation) {A057A204-BACC-4D26-9990-79A187E2698E} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found {bb46be07-13eb-4c49-b0f0-fc78b9ea4983} [HKLM] -> [Updater For XFIN_PORTAL] -> File not found {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} [HKLM] -> C:\Program Files\Trend Micro\AMSP\module\20002\6.6.1010\6.6.1010\TmBpIe32.dll [TmBpIeBHO Class] -> [2011/03/24 19:06:58 | 000,235,024 | ---- | M] (Trend Micro Inc.) {d2ce3e00-f94a-4740-988e-03dc2f38c34f} [HKLM] -> C:\Program Files\MSN\Toolbar\3.0.1125.0\msneshellx.dll [MSN Toolbar Helper] -> [2009/02/09 21:33:14 | 000,082,768 | ---- | M] (Microsoft Corp.) {DBC80044-A445-435b-BC74-9C25C1C588A9} [HKLM] -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [Java(tm) Plug-In 2 SSV Helper] -> [2012/05/04 19:29:42 | 000,157,576 | ---- | M] (Oracle Corporation) < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> "{1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414}" [HKLM] -> C:\Program Files\MSN\Toolbar\3.0.1125.0\msneshellx.dll [MSN Toolbar] -> [2009/02/09 21:33:14 | 000,082,768 | ---- | M] (Microsoft Corp.) "{A057A204-BACC-4D26-9990-79A187E2698E}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found "{CCAC5586-44D7-4c43-B64A-F042461A97D2}" [HKLM] -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [Trend Micro Toolbar] -> [2011/02/17 12:28:32 | 000,194,064 | ---- | M] (Trend Micro Inc.) < Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Toolbar\ -> WebBrowser\\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{4B3803EA-5230-4DC3-A7FC-33638F3D3542}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{A057A204-BACC-4D26-9990-79A187E2698E}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> "HostManager" -> C:\Program Files\Common Files\AOL\1208987670\EE\AOLHostManager.exe [C:\Program Files\Common Files\AOL\1208987670\EE\AOLHostManager.exe] -> [2004/11/03 14:03:00 | 000,125,528 | ---- | M] (America Online, Inc.) "MegaPanel" -> C:\Program Files\National Consumer Panel\NCP Internet Transporter\HSTrans.exe [C:\Program Files\National Consumer Panel\NCP Internet Transporter\HSTrans.exe] -> [2009/12/11 13:17:56 | 002,113,536 | ---- | M] (NCP) "NvCplDaemon" -> C:\WINDOWS\System32\NvCpl.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup] -> [2008/04/06 19:41:44 | 008,466,432 | ---- | M] (NVIDIA Corporation) "NvMediaCenter" -> C:\WINDOWS\System32\NvMcTray.dll [RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit] -> [2008/04/06 19:42:10 | 000,081,920 | ---- | M] (NVIDIA Corporation) "nwiz" -> C:\WINDOWS\System32\nwiz.exe [nwiz.exe /install] -> [2008/04/06 19:42:50 | 001,626,112 | ---- | M] () "Trend Micro Client Framework" -> C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe ["C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"] -> [2011/02/10 07:00:24 | 000,116,752 | ---- | M] (Trend Micro Inc.) "Trend Micro Titanium" -> C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe -set Silent "1" SplashURL ""] -> [2011/10/08 08:16:10 | 001,111,568 | ---- | M] (Trend Micro Inc.) < Run [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> "SUPERAntiSpyware" -> C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe] -> [2012/06/26 10:33:03 | 003,906,432 | ---- | M] (SUPERAntiSpyware.com) < All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WhiteSmoke Translator.lnk -> -> File not found < Default User Startup Folder > -> C:\Documents and Settings\Default User\Start Menu\Programs\Startup -> < Elaine Strean Startup Folder > -> C:\Documents and Settings\Elaine Strean\Start Menu\Programs\Startup -> < Kenneth Strean Startup Folder > -> C:\Documents and Settings\Kenneth Strean\Start Menu\Programs\Startup -> < Software Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer -> < Software Policy Settings [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Policies\Microsoft\Internet Explorer -> < CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoCDBurning" -> [0] -> File not found \\"NoDriveTypeAutoRun" -> [323] -> File not found \\"NoDriveAutoRun" -> [67108863] -> File not found \\"NoDrives" -> [0] -> File not found < CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [323] -> File not found \\"NoDriveAutoRun" -> [67108863] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [323] -> File not found \\"NoDriveAutoRun" -> [67108863] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-19] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-20] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [323] -> File not found \\"NoDriveAutoRun" -> [67108863] -> File not found \\"NoDrives" -> [0] -> File not found < CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> < Internet Explorer Menu Extensions [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\MenuExt\ -> Google Sidewiki... -> [res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html] -> File not found < Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16}:{68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} [HKLM] -> [Button: AVG Do Not Track] -> File not found < Internet Explorer Extensions [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> [Reg Error: Value error.] -> File not found < Internet Explorer Extensions [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> [Reg Error: Value error.] -> File not found < Internet Explorer Extensions [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> [Reg Error: Value error.] -> File not found CmdMapping\\"{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}" [HKLM] -> [Reg Error: Key error.] -> File not found < Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> < Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix "" -> http:// < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {17492023-C23A-453E-A040-C7C580BBF700} [HKLM] -> http://go.microsoft.com/fwlink/?linkid=39204 [Windows Genuine Advantage Validation Tool] -> {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [HKLM] -> http://www.update.microsoft.com/micr...?1341087178636 [MUWebControl Class] -> {7530BFB8-7293-4D34-9923-61A11451AFC5} [HKLM] -> http://download.eset.com/special/eos/OnlineScanner.cab [OnlineScanner Control] -> {E2883E8F-472F-4FB0-9522-AC9BF37916A7} [HKLM] -> http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab [Reg Error: Key error.] -> CabBuilder [HKLM] -> http://www.imgag.com/kiw/toolbar/dow...lerControl.cab [Reg Error: Key error.] -> < Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ -> DhcpNameServer -> 75.75.75.75 75.75.76.76 -> < Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {3743EF6B-1187-4DC8-A792-33B270D77432}\\DhcpNameServer -> 75.75.75.75 75.75.76.76 (NVIDIA nForce Networking Controller) -> < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> *Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> Explorer.exe -> C:\WINDOWS\explorer.exe -> [2007/06/13 03:23:07 | 001,033,216 | ---- | M] (Microsoft Corporation) *MultiFile Done* -> -> *UserInit* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit -> C:\WINDOWS\system32\userinit.exe -> C:\WINDOWS\system32\userinit.exe -> [2008/04/13 17:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) *MultiFile Done* -> -> < Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> !SASWinLogon -> C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL -> [2011/05/04 10:54:14 | 000,551,296 | ---- | M] (SUPERAntiSpyware.com) < ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}" [HKLM] -> C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [] -> [2011/07/18 17:02:18 | 000,113,024 | ---- | M] (SuperAdBlocker.com) < Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List -> "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" -> [C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe:*:Enabled:CyberLink PowerDVD DX Resident Program] -> File not found "C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe" -> [C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe:*:Enabled:CyberLink PowerDVD DX] -> File not found < Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> "C:\dell\EXPRESS.EXE" -> C:\dell\EXPRESS.EXE [C:\dell\EXPRESS.EXE:*:Enabled:Express Service Code] -> [2006/06/08 09:54:20 | 000,551,936 | ---- | M] (Dell, Inc.) "C:\Program Files\America Online 9.0\waol.exe" -> C:\Program Files\America Online 9.0\waol.exe [C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL] -> [2006/08/31 09:30:25 | 000,037,464 | ---- | M] (America Online, Inc.) "C:\Program Files\Common Files\AOL\1208987670\EE\AOLServiceHost.exe" -> C:\Program Files\Common Files\AOL\1208987670\EE\AOLServiceHost.exe [C:\Program Files\Common Files\AOL\1208987670\EE\AOLServiceHost.exe:*:Enabled:AOL] -> [2004/11/03 14:03:00 | 000,110,680 | ---- | M] (America Online, Inc.) "C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" -> C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe [C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL] -> [2004/10/20 06:40:04 | 000,010,328 | R--- | M] (America Online) "C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" -> C:\Program Files\Common Files\AOL\ACS\AOLDial.exe [C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL] -> [2004/10/20 06:40:04 | 000,034,904 | R--- | M] (America Online) "C:\Program Files\Common Files\AOL\Loader\aolload.exe" -> C:\Program Files\Common Files\AOL\Loader\aolload.exe [C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Application Loader] -> [2004/10/14 15:33:08 | 000,012,888 | ---- | M] (America Online, Inc.) "C:\Program Files\Common Files\AOL\System Information\sinf.exe" -> C:\Program Files\Common Files\AOL\System Information\sinf.exe [C:\Program Files\Common Files\AOL\System Information\sinf.exe:*:Enabled:AOL] -> [2005/04/05 17:06:43 | 000,140,888 | ---- | M] (America Online Inc.) "C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe" -> C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe [C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe:*:Enabled:AOLTopSpeed] -> [2004/10/15 13:54:12 | 000,046,768 | ---- | M] (America Online Inc) "C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe" -> C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe [C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe:*:Enabled:AOLTsMon] -> [2004/10/15 13:54:14 | 000,100,016 | ---- | M] (America Online, Inc) "C:\Program Files\Yahoo!\Yahoo! Music Jukebox\YahooMusicEngine.exe" -> C:\Program Files\Yahoo!\Yahoo! Music Jukebox\YahooMusicEngine.exe [C:\Program Files\Yahoo!\Yahoo! Music Jukebox\YahooMusicEngine.exe:*:Disabled:Yahoo! Music Jukebox] -> [2007/06/17 04:56:42 | 006,399,480 | ---- | M] (Yahoo! Inc.) "C:\WINDOWS\system32\mmc.exe" -> C:\WINDOWS\System32\mmc.exe [C:\WINDOWS\system32\mmc.exe:*:Disabled:Microsoft Management Console] -> [2008/04/13 17:12:25 | 001,414,656 | ---- | M] (Microsoft Corporation) "C:\WINDOWS\system32\usmt\migwiz.exe" -> C:\WINDOWS\System32\usmt\migwiz.exe [C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard] -> [2008/04/13 17:12:25 | 000,245,248 | ---- | M] (Microsoft Corporation) < SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> < CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom -> "AutoRun" -> 1 -> "DisplayName" -> CD-ROM Driver -> "ImagePath" -> [system32\DRIVERS\cdrom.sys] -> File not found < Drives with AutoRun files > -> -> C:\AUTOEXEC.BAT [] -> C:\AUTOEXEC.BAT [ NTFS ] -> [2004/08/10 11:04:08 | 000,000,000 | ---- | M] () < MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> < Registry Shell Spawning - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command -> comfile [open] -> "%1" %* -> exefile [open] -> "%1" %* -> < File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\ -> .com [@ = ComFile] -> "%1" %* -> .exe [@ = exefile] -> "%1" %* -> [Registry - Additional Scans - Safe List] < Disabled MSConfig State [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\state -> "bootini" -> 0 -> "services" -> 0 -> "startup" -> 0 -> "system.ini" -> 0 -> "win.ini" -> 0 -> < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost > -> -> *netsvcs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs -> 6to4 -> -> File not found AppMgmt -> -> File not found HidServ -> -> File not found Ias -> -> File not found Iprip -> -> File not found Irmon -> -> File not found NWCWorkstation -> -> File not found Nwsapagent -> -> File not found WmdmPmSp -> -> File not found *MultiFile Done* -> -> < EventViewer Logs - Last 10 Errors > -> Event Information -> Description Application [ Error ] 6/21/2012 10:27:52 PM Computer Name = DB85P4G1 | Source = crypt32 | ID = 131083 -> Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.co...uthrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. Application [ Error ] 6/22/2012 10:17:38 PM Computer Name = DB85P4G1 | Source = IDVault | ID = 0 -> Description = IsStrikeForceAlreadyRunning failed Cannot process request because the process (1336) has exited. at System.Diagnostics.Process.GetProcessHandle(Int32 access, Boolean throwIfExited) at System.Diagnostics.Process.OpenProcessHandle() at System.Diagnostics.Process.set_EnableRaisingEvents(Boolean value) at (Object , Boolean ) at ? .? . () Application [ Error ] 6/22/2012 10:17:38 PM Computer Name = DB85P4G1 | Source = IDVault | ID = 0 -> Description = IsStrikeForceAlreadyRunning failed Cannot process request because the process (1652) has exited. at System.Diagnostics.Process.GetProcessHandle(Int32 access, Boolean throwIfExited) at System.Diagnostics.Process.OpenProcessHandle() at System.Diagnostics.Process.set_EnableRaisingEvents(Boolean value) at (Object , Boolean ) at ? .? . () Application [ Error ] 6/29/2012 3:59:45 PM Computer Name = DB85P4G1 | Source = Application Error | ID = 1000 -> Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting module mshtml.dll, version 8.0.6001.18702, fault address 0x0009da70. Application [ Error ] 6/29/2012 3:59:49 PM Computer Name = DB85P4G1 | Source = Application Error | ID = 1001 -> Description = Fault bucket 1192495393. Application [ Error ] 6/29/2012 6:55:40 PM Computer Name = DB85P4G1 | Source = crypt32 | ID = 131083 -> Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.co...uthrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. Application [ Error ] 6/29/2012 6:55:40 PM Computer Name = DB85P4G1 | Source = crypt32 | ID = 131083 -> Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.co...uthrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. Application [ Error ] 6/29/2012 7:08:23 PM Computer Name = DB85P4G1 | Source = AntiSpywareService | ID = 0 -> Description = Application [ Error ] 6/29/2012 7:43:03 PM Computer Name = DB85P4G1 | Source = AntiSpywareService | ID = 0 -> Description = Application [ Error ] 6/29/2012 9:12:52 PM Computer Name = DB85P4G1 | Source = AntiSpywareService | ID = 0 -> Description = System [ Error ] 7/2/2012 4:23:07 PM Computer Name = DB85P4G1 | Source = Service Control Manager | ID = 7026 -> Description = The following boot-start or system-start driver(s) failed to load: AVGIDSHX System [ Error ] 7/2/2012 8:27:12 PM Computer Name = DB85P4G1 | Source = Service Control Manager | ID = 7011 -> Description = Timeout (30000 milliseconds) waiting for a transaction response from the Netman service. System [ Error ] 7/3/2012 2:06:26 PM Computer Name = DB85P4G1 | Source = Service Control Manager | ID = 7026 -> Description = The following boot-start or system-start driver(s) failed to load: AVGIDSHX System [ Error ] 7/3/2012 7:49:25 PM Computer Name = DB85P4G1 | Source = F-Secure Standalone Minifilter | ID = 327681 -> Description = System [ Error ] 7/3/2012 7:49:33 PM Computer Name = DB85P4G1 | Source = F-Secure Standalone Minifilter | ID = 327681 -> Description = System [ Error ] 7/3/2012 7:51:10 PM Computer Name = DB85P4G1 | Source = F-Secure Standalone Minifilter | ID = 327681 -> Description = System [ Error ] 7/3/2012 7:52:48 PM Computer Name = DB85P4G1 | Source = F-Secure Standalone Minifilter | ID = 327681 -> Description = System [ Error ] 7/3/2012 7:55:13 PM Computer Name = DB85P4G1 | Source = Service Control Manager | ID = 7026 -> Description = The following boot-start or system-start driver(s) failed to load: AVGIDSHX System [ Error ] 7/4/2012 11:03:06 AM Computer Name = DB85P4G1 | Source = Service Control Manager | ID = 7026 -> Description = The following boot-start or system-start driver(s) failed to load: AVGIDSHX System [ Error ] 7/5/2012 12:31:34 AM Computer Name = DB85P4G1 | Source = Service Control Manager | ID = 7026 -> Description = The following boot-start or system-start driver(s) failed to load: AVGIDSHX [Files/Folders - Created Within 30 Days] OTS.exe -> C:\Documents and Settings\Elaine Strean\Desktop\OTS.exe -> [2012/07/04 21:48:32 | 000,646,656 | ---- | C] (OldTimer Tools) f-secure -> C:\Documents and Settings\Elaine Strean\Application Data\f-secure -> [2012/07/03 16:46:06 | 000,000,000 | ---D | C] F-Secure -> C:\Documents and Settings\All Users\Application Data\F-Secure -> [2012/07/03 16:45:37 | 000,000,000 | ---D | C] Sun -> C:\Documents and Settings\Elaine Strean\Local Settings\Application Data\Sun -> [2012/07/03 16:38:29 | 000,000,000 | ---D | C] Java -> C:\Program Files\Common Files\Java -> [2012/07/03 16:37:46 | 000,000,000 | ---D | C] Oracle -> C:\Program Files\Oracle -> [2012/07/03 16:37:04 | 000,000,000 | ---D | C] Oracle -> C:\Documents and Settings\Elaine Strean\Application Data\Oracle -> [2012/07/03 16:36:53 | 000,000,000 | ---D | C] npDeployJava1.dll -> C:\WINDOWS\System32\npDeployJava1.dll -> [2012/07/03 16:36:45 | 000,772,504 | ---- | C] (Oracle Corporation) javaws.exe -> C:\WINDOWS\System32\javaws.exe -> [2012/07/03 16:36:45 | 000,227,720 | ---- | C] (Oracle Corporation) javacpl.cpl -> C:\WINDOWS\System32\javacpl.cpl -> [2012/07/03 16:36:45 | 000,143,872 | ---- | C] (Oracle Corporation) javaw.exe -> C:\WINDOWS\System32\javaw.exe -> [2012/07/03 16:36:32 | 000,174,064 | ---- | C] (Oracle Corporation) java.exe -> C:\WINDOWS\System32\java.exe -> [2012/07/03 16:36:32 | 000,174,064 | ---- | C] (Oracle Corporation) Java -> C:\Program Files\Java -> [2012/07/03 16:35:40 | 000,000,000 | ---D | C] ESET -> C:\Program Files\ESET -> [2012/07/01 16:51:19 | 000,000,000 | ---D | C] RECYCLER -> C:\RECYCLER -> [2012/07/01 16:04:29 | 000,000,000 | -HSD | C] cmdcons -> C:\cmdcons -> [2012/07/01 13:10:30 | 000,000,000 | RHSD | C] puppy24365p -> C:\puppy24365p -> [2012/07/01 13:06:46 | 000,000,000 | ---D | C] puppy21311p -> C:\puppy21311p -> [2012/07/01 13:06:21 | 000,000,000 | ---D | C] puppy30060p -> C:\puppy30060p -> [2012/07/01 13:05:18 | 000,000,000 | ---D | C] PROCEXP113.SYS -> C:\WINDOWS\System32\drivers\PROCEXP113.SYS -> [2012/07/01 13:05:14 | 000,012,568 | ---- | C] (Sysinternals - www.sysinternals.com) puppy -> C:\puppy -> [2012/07/01 10:50:32 | 000,000,000 | ---D | C] SWREG.exe -> C:\WINDOWS\SWREG.exe -> [2012/06/30 16:38:47 | 000,518,144 | ---- | C] (SteelWerX) SWSC.exe -> C:\WINDOWS\SWSC.exe -> [2012/06/30 16:38:47 | 000,406,528 | ---- | C] (SteelWerX) SWXCACLS.exe -> C:\WINDOWS\SWXCACLS.exe -> [2012/06/30 16:38:47 | 000,212,480 | ---- | C] (SteelWerX) NIRCMD.exe -> C:\WINDOWS\NIRCMD.exe -> [2012/06/30 16:38:47 | 000,060,416 | ---- | C] (NirSoft) Qoobox -> C:\Qoobox -> [2012/06/30 16:37:11 | 000,000,000 | ---D | C] puppy.exe -> C:\Documents and Settings\Elaine Strean\Desktop\puppy.exe -> [2012/06/30 16:36:33 | 004,568,829 | R--- | C] (Swearware) erdnt -> C:\WINDOWS\erdnt -> [2012/06/30 16:35:38 | 000,000,000 | ---D | C] ie8 -> C:\WINDOWS\ie8 -> [2012/06/30 12:28:16 | 000,000,000 | -H-D | C] MGADiag.exe -> C:\Documents and Settings\Elaine Strean\Desktop\MGADiag.exe -> [2012/06/29 16:49:07 | 002,031,992 | ---- | C] (Microsoft Corporation) Office Genuine Advantage -> C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage -> [2012/06/29 16:47:25 | 000,000,000 | ---D | C] Downloads -> C:\Documents and Settings\Elaine Strean\My Documents\Downloads -> [2012/06/29 15:49:11 | 000,000,000 | ---D | C] Google Chrome -> C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome -> [2012/06/29 14:40:01 | 000,000,000 | ---D | C] SUPERAntiSpyware.com -> C:\Documents and Settings\Elaine Strean\Application Data\SUPERAntiSpyware.com -> [2012/06/29 14:36:38 | 000,000,000 | ---D | C] SUPERAntiSpyware -> C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware -> [2012/06/29 14:36:32 | 000,000,000 | ---D | C] SUPERAntiSpyware.com -> C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com -> [2012/06/29 14:36:28 | 000,000,000 | ---D | C] SUPERAntiSpyware -> C:\Program Files\SUPERAntiSpyware -> [2012/06/29 14:36:28 | 000,000,000 | ---D | C] Malwarebytes -> C:\Documents and Settings\Elaine Strean\Application Data\Malwarebytes -> [2012/06/29 14:32:20 | 000,000,000 | ---D | C] Malwarebytes' Anti-Malware -> C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware -> [2012/06/29 14:32:13 | 000,000,000 | ---D | C] Malwarebytes -> C:\Documents and Settings\All Users\Application Data\Malwarebytes -> [2012/06/29 14:32:11 | 000,000,000 | ---D | C] mbam.sys -> C:\WINDOWS\System32\drivers\mbam.sys -> [2012/06/29 14:32:10 | 000,022,344 | ---- | C] (Malwarebytes Corporation) Malwarebytes' Anti-Malware -> C:\Program Files\Malwarebytes' Anti-Malware -> [2012/06/29 14:32:10 | 000,000,000 | ---D | C] HiJackThis -> C:\Documents and Settings\Elaine Strean\Start Menu\Programs\HiJackThis -> [2012/06/28 17:50:52 | 000,000,000 | ---D | C] AVG2012 -> C:\Documents and Settings\Elaine Strean\Application Data\AVG2012 -> [2012/06/21 20:18:56 | 000,000,000 | ---D | C] AVG Secure Search -> C:\Program Files\Common Files\AVG Secure Search -> [2012/06/21 17:04:42 | 000,000,000 | ---D | C] Common Files -> C:\Documents and Settings\All Users\Application Data\Common Files -> [2012/06/21 17:03:44 | 000,000,000 | -H-D | C] AVG2012 -> C:\Documents and Settings\All Users\Application Data\AVG2012 -> [2012/06/21 17:03:06 | 000,000,000 | ---D | C] comcasttb -> C:\Program Files\comcasttb -> [2012/06/08 16:50:23 | 000,000,000 | ---D | C] 6 C:\WINDOWS\Fonts\*.tmp files -> C:\WINDOWS\Fonts\*.tmp -> 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> [Files/Folders - Modified Within 30 Days] User_Feed_Synchronization-{6AFCE08B-0196-4590-A1EC-5A865B41E2BB}.job -> C:\WINDOWS\tasks\User_Feed_Synchronization-{6AFCE08B-0196-4590-A1EC-5A865B41E2BB}.job -> [2012/07/04 21:51:00 | 000,000,440 | -H-- | M] () OTS.exe -> C:\Documents and Settings\Elaine Strean\Desktop\OTS.exe -> [2012/07/04 21:48:34 | 000,646,656 | ---- | M] (OldTimer Tools) Adobe Flash Player Updater.job -> C:\WINDOWS\tasks\Adobe Flash Player Updater.job -> [2012/07/04 21:37:00 | 000,000,830 | ---- | M] () GoogleUpdateTaskMachineCore.job -> C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job -> [2012/07/04 21:31:39 | 000,000,898 | ---- | M] () bootstat.dat -> C:\WINDOWS\bootstat.dat -> [2012/07/04 21:31:19 | 000,002,048 | --S- | M] () hiberfil.sys -> C:\hiberfil.sys -> [2012/07/04 21:31:17 | 2078,789,632 | -HS- | M] () GoogleUpdateTaskMachineUA.job -> C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job -> [2012/07/04 08:06:06 | 000,000,902 | ---- | M] () javaw.exe -> C:\WINDOWS\System32\javaw.exe -> [2012/07/03 16:35:47 | 000,174,064 | ---- | M] (Oracle Corporation) java.exe -> C:\WINDOWS\System32\java.exe -> [2012/07/03 16:35:47 | 000,174,064 | ---- | M] (Oracle Corporation) Google.url -> C:\Documents and Settings\Elaine Strean\Desktop\Google.url -> [2012/07/03 12:01:17 | 000,000,211 | ---- | M] () SUPERAntiSpyware Scheduled Task e6c77580-b657-4ab2-b161-a25b1e8ff57c.job -> C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task e6c77580-b657-4ab2-b161-a25b1e8ff57c.job -> [2012/07/02 14:36:00 | 000,000,526 | ---- | M] () SUPERAntiSpyware Scheduled Task d3c607ac-0c85-413d-a6f2-fef53e1af5d0.job -> C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task d3c607ac-0c85-413d-a6f2-fef53e1af5d0.job -> [2012/07/02 08:59:54 | 000,000,526 | ---- | M] () wpa.dbl -> C:\WINDOWS\System32\wpa.dbl -> [2012/07/01 16:47:59 | 000,002,206 | ---- | M] () PROCEXP113.SYS -> C:\WINDOWS\System32\drivers\PROCEXP113.SYS -> [2012/07/01 13:27:55 | 000,012,568 | ---- | M] (Sysinternals - www.sysinternals.com) hosts -> C:\WINDOWS\System32\drivers\etc\hosts -> [2012/07/01 13:22:32 | 000,000,027 | ---- | M] () boot.ini -> C:\boot.ini -> [2012/07/01 13:10:37 | 000,000,327 | RHS- | M] () (18 unread) Yahoo! Mail.url -> C:\Documents and Settings\Elaine Strean\Desktop\(18 unread) Yahoo! Mail.url -> [2012/07/01 11:08:05 | 000,000,627 | ---- | M] () puppy.exe -> C:\Documents and Settings\Elaine Strean\Desktop\puppy.exe -> [2012/07/01 10:47:23 | 004,568,829 | R--- | M] (Swearware) hbmu5ijs.exe -> C:\Documents and Settings\Elaine Strean\Desktop\hbmu5ijs.exe -> [2012/06/30 13:48:49 | 000,302,592 | ---- | M] () Launch Internet Explorer Browser.lnk -> C:\Documents and Settings\Elaine Strean\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> [2012/06/30 12:45:11 | 000,000,815 | ---- | M] () MGADiag.exe -> C:\Documents and Settings\Elaine Strean\Desktop\MGADiag.exe -> [2012/06/29 16:49:10 | 002,031,992 | ---- | M] (Microsoft Corporation) Google Chrome.lnk -> C:\Documents and Settings\Elaine Strean\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> [2012/06/29 14:40:03 | 000,001,791 | ---- | M] () Google Chrome.lnk -> C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk -> [2012/06/29 14:40:02 | 000,001,813 | ---- | M] () HiJackThis.lnk -> C:\Documents and Settings\Elaine Strean\Desktop\HiJackThis.lnk -> [2012/06/29 13:11:32 | 000,002,463 | ---- | M] () Download HijackThis 2.0.4 - FileHippo.com.url -> C:\Documents and Settings\Elaine Strean\Desktop\Download HijackThis 2.0.4 - FileHippo.com.url -> [2012/06/28 17:44:43 | 000,002,608 | ---- | M] () Windows XP - Tech Support Guy Forums.url -> C:\Documents and Settings\Elaine Strean\Desktop\Windows XP - Tech Support Guy Forums.url -> [2012/06/27 16:01:02 | 000,000,480 | ---- | M] () myProvidence.url -> C:\Documents and Settings\Elaine Strean\Desktop\myProvidence.url -> [2012/06/24 18:03:53 | 000,000,573 | ---- | M] () NCP Online.url -> C:\Documents and Settings\Elaine Strean\Desktop\NCP Online.url -> [2012/06/23 14:07:17 | 000,000,266 | ---- | M] () FlashPlayerApp.exe -> C:\WINDOWS\System32\FlashPlayerApp.exe -> [2012/06/13 17:54:18 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) FlashPlayerCPLApp.cpl -> C:\WINDOWS\System32\FlashPlayerCPLApp.cpl -> [2012/06/13 17:54:18 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) Boot.bak -> C:\Boot.bak -> [2012/06/08 18:33:27 | 000,000,211 | ---- | M] () 90 C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp -> 90 C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp -> 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> [Files - No Company Name] SUPERAntiSpyware Scheduled Task d3c607ac-0c85-413d-a6f2-fef53e1af5d0.job -> C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task d3c607ac-0c85-413d-a6f2-fef53e1af5d0.job -> [2012/07/02 08:59:53 | 000,000,526 | ---- | C] () Boot.bak -> C:\Boot.bak -> [2012/07/01 13:10:37 | 000,000,211 | ---- | C] () cmldr -> C:\cmldr -> [2012/07/01 13:10:36 | 000,260,272 | RHS- | C] () PEV.exe -> C:\WINDOWS\PEV.exe -> [2012/06/30 16:38:47 | 000,256,000 | ---- | C] () MBR.exe -> C:\WINDOWS\MBR.exe -> [2012/06/30 16:38:47 | 000,208,896 | ---- | C] () sed.exe -> C:\WINDOWS\sed.exe -> [2012/06/30 16:38:47 | 000,098,816 | ---- | C] () grep.exe -> C:\WINDOWS\grep.exe -> [2012/06/30 16:38:47 | 000,080,412 | ---- | C] () zip.exe -> C:\WINDOWS\zip.exe -> [2012/06/30 16:38:47 | 000,068,096 | ---- | C] () hbmu5ijs.exe -> C:\Documents and Settings\Elaine Strean\Desktop\hbmu5ijs.exe -> [2012/06/30 13:48:46 | 000,302,592 | ---- | C] () Google Chrome.lnk -> C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk -> [2012/06/29 14:40:02 | 000,001,813 | ---- | C] () Google Chrome.lnk -> C:\Documents and Settings\Elaine Strean\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> [2012/06/29 14:40:02 | 000,001,791 | ---- | C] () SUPERAntiSpyware Scheduled Task e6c77580-b657-4ab2-b161-a25b1e8ff57c.job -> C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task e6c77580-b657-4ab2-b161-a25b1e8ff57c.job -> [2012/06/29 14:36:41 | 000,000,526 | ---- | C] () HiJackThis.lnk -> C:\Documents and Settings\Elaine Strean\Desktop\HiJackThis.lnk -> [2012/06/28 17:50:53 | 000,002,463 | ---- | C] () Download HijackThis 2.0.4 - FileHippo.com.url -> C:\Documents and Settings\Elaine Strean\Desktop\Download HijackThis 2.0.4 - FileHippo.com.url -> [2012/06/28 17:44:43 | 000,002,608 | ---- | C] () Windows XP - Tech Support Guy Forums.url -> C:\Documents and Settings\Elaine Strean\Desktop\Windows XP - Tech Support Guy Forums.url -> [2012/06/27 16:01:02 | 000,000,480 | ---- | C] () FontCache3.0.0.0.dat -> C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat -> [2011/12/20 11:25:15 | 000,253,936 | ---- | C] () currdat.lst -> C:\Documents and Settings\All Users\Application Data\currdat.lst -> [2011/11/06 16:37:25 | 000,001,039 | ---- | C] () WV5DataStore -> C:\Documents and Settings\All Users\Application Data\WV5DataStore -> [2011/11/06 16:35:29 | 010,485,760 | ---- | C] () patchw32.dll -> C:\WINDOWS\patchw32.dll -> [2010/12/13 17:04:11 | 000,181,760 | ---- | C] () < End of report > |
05-Jul-2012, 11:03 AM
#44 | ||||||
| Start OTS. Copy/Paste the information in the code box below into the pane where it says "Paste fix here" and then click the "Run Fix" button. The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the OK button and Notepad will open with a log of actions taken during the fix. Post that information back here please. Code: [Kill All Processes]
[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > ->
YN -> HKEY_LOCAL_MACHINE\: SearchURL\\"provider" -> gogl
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YN -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} [HKLM] -> [AVG Do Not Track]
YN -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> {A057A204-BACC-4D26-9990-79A187E2698E} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> {bb46be07-13eb-4c49-b0f0-fc78b9ea4983} [HKLM] -> [Updater For XFIN_PORTAL]
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
YN -> "{A057A204-BACC-4D26-9990-79A187E2698E}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> WebBrowser\\"{4B3803EA-5230-4DC3-A7FC-33638F3D3542}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> WebBrowser\\"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> WebBrowser\\"{A057A204-BACC-4D26-9990-79A187E2698E}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\
YN -> {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16}:{68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} [HKLM] -> [Button: AVG Do Not Track]
< Internet Explorer Extensions [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\
YN -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> [Reg Error: Value error.]
< Internet Explorer Extensions [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\
YN -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> [Reg Error: Value error.]
< Internet Explorer Extensions [HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\] > -> HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Extensions\
YN -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> [Reg Error: Value error.]
YN -> CmdMapping\\"{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}" [HKLM] -> [Reg Error: Key error.]
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\
YN -> {E2883E8F-472F-4FB0-9522-AC9BF37916A7} [HKLM] -> http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab [Reg Error: Key error.]
YN -> CabBuilder [HKLM] -> http://www.imgag.com/kiw/toolbar/dow...lerControl.cab [Reg Error: Key error.]
[Files/Folders - Created Within 30 Days]
NY -> AVG2012 -> C:\Documents and Settings\Elaine Strean\Application Data\AVG2012
NY -> AVG Secure Search -> C:\Program Files\Common Files\AVG Secure Search
NY -> AVG2012 -> C:\Documents and Settings\All Users\Application Data\AVG2012
NY -> 6 C:\WINDOWS\Fonts\*.tmp files -> C:\WINDOWS\Fonts\*.tmp
NY -> 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp
NY -> 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp
[Files/Folders - Modified Within 30 Days]
NY -> 90 C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp
NY -> 90 C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Elaine Strean\Local Settings\temp\*.tmp
NY -> 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp
NY -> 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp
[Empty Temp Folders]
[EmptyFlash]
[EmptyJava]
[Start Explorer]
[Reboot]
__________________ Microsoft MVP - Consumer Security |
|
05-Jul-2012, 09:35 PM
#45 |
| All Processes Killed [Registry - Safe List] Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchURL\\provider deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{bb46be07-13eb-4c49-b0f0-fc78b9ea4983}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bb46be07-13eb-4c49-b0f0-fc78b9ea4983}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{A057A204-BACC-4D26-9990-79A187E2698E} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}\ not found. Registry value HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. Registry value HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found. Registry value HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found. Registry value HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{A057A204-BACC-4D26-9990-79A187E2698E} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{68BCFFE1-A2DA-4B40-9068-87ECBFC19D16}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68BCFFE1-A2DA-4B40-9068-87ECBFC19D16}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68BCFFE1-A2DA-4B40-9068-87ECBFC19D16}:{68BCFFE1-A2DA-4B40-9068-87ECBFC19D16}\ not found. Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ deleted successfully. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ not found. Registry value HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ not found. Registry value HKEY_USERS\S-1-5-21-1314697744-1693218791-833567686-1007\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ not found. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} C:\WINDOWS\Downloaded Program Files\gp.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Starting removal of ActiveX control CabBuilder Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\CabBuilder\DownloadInformation\\INF . Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\CabBuilder\ not found. [Files/Folders - Created Within 30 Days] C:\Documents and Settings\Elaine Strean\Application Data\AVG2012\cfgall folder moved successfully. C:\Documents and Settings\Elaine Strean\Application Data\AVG2012 folder moved successfully. C:\Program Files\Common Files\AVG Secure Search folder moved successfully. C:\Documents and Settings\All Users\Application Data\AVG2012\fet folder moved successfully. C:\Documents and Settings\All Users\Application Data\AVG2012 folder moved successfully. C:\WINDOWS\Fonts\SET4D4.tmp deleted successfully. C:\WINDOWS\Fonts\SET4D5.tmp deleted successfully. C:\WINDOWS\Fonts\SET4D6.tmp deleted successfully. C:\WINDOWS\Fonts\SET4D7.tmp deleted successfully. C:\WINDOWS\Fonts\SET4D8.tmp deleted successfully. C:\WINDOWS\Fonts\SET4D9.tmp deleted successfully. C:\WINDOWS\002715_.tmp deleted successfully. C:\WINDOWS\002716_.tmp deleted successfully. C:\WINDOWS\msdownld.tmp folder deleted successfully. C:\WINDOWS\System32\CONFIG.TMP deleted successfully. [Files/Folders - Modified Within 30 Days] C:\Documents and Settings\Elaine Strean\Local Settings\temp\FXI16.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\RD11.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG10.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG101.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG102.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG11.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG113.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG114.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG11C.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG11D.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG12.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG13.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG14.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG15.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG16.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG17.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG18.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG19.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1A.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1B.tmp deleted successfully. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1C.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1D.tmp scheduled to be deleted on reboot. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG23.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG24.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG25.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG26.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG28.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG29.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG2A.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG2B.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG2F.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG30.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG33.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG34.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG3B.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG3C.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG3F.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG40.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG43.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG44.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG46.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG47.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG49.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG4B.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG4C.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG51.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG52.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG55.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG56.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG5D.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG5E.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG5F.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG60.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG62.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG63.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG6B.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG6C.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG6E.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG6F.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG75.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG76.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG7C.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG7D.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG97.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG98.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG99.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG9A.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGA7.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGA8.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGA9.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGAA.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGE.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGF.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGF8.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REGF9.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\tmp7.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\tmp8.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS7A.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS7B.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS7C.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS7D.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS7E.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS7F.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS80.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS81.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS82.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS83.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS84.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS85.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS86.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS87.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS88.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS8B.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS8C.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS8D.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS8E.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS8F.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS90.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS91.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS92.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS93.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS94.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\USS95.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF2E17.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF8C2D.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF8C7A.tmp deleted successfully. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF9234.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF9C97.tmp scheduled to be deleted on reboot. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DFC607.tmp deleted successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DFC654.tmp deleted successfully. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1C.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1D.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF9234.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF9C97.tmp scheduled to be deleted on reboot. [Empty Temp Folders] User: All Users User: Default User ->Temp folder emptied: 49152 bytes ->Temporary Internet Files folder emptied: 2777283 bytes ->Flash cache emptied: 922 bytes User: Elaine Strean ->Temp folder emptied: 484944407 bytes ->Temporary Internet Files folder emptied: 90050166 bytes ->Java cache emptied: 42366254 bytes ->Google Chrome cache emptied: 24496533 bytes ->Flash cache emptied: 2181 bytes User: Kenneth Strean ->Temp folder emptied: 594305 bytes ->Temporary Internet Files folder emptied: 55855391 bytes ->Java cache emptied: 46229286 bytes ->Google Chrome cache emptied: 17830654 bytes ->Flash cache emptied: 1627 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 49286 bytes ->Flash cache emptied: 61 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 222638 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 2428992 bytes RecycleBin emptied: 104 bytes Total Files Cleaned = 732.00 mb [EMPTYFLASH] User: All Users User: Default User ->Flash cache emptied: 0 bytes User: Elaine Strean ->Flash cache emptied: 0 bytes User: Kenneth Strean ->Flash cache emptied: 0 bytes User: LocalService ->Flash cache emptied: 0 bytes User: NetworkService Total Flash Files Cleaned = 0.00 mb [EMPTYJAVA] User: All Users User: Default User User: Elaine Strean ->Java cache emptied: 0 bytes User: Kenneth Strean ->Java cache emptied: 0 bytes User: LocalService User: NetworkService Total Java Files Cleaned = 0.00 mb < End of fix log > OTS by OldTimer - Version 3.1.47.2 fix logfile created on 07052012_182831 Files\Folders moved on Reboot... C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1C.tmp moved successfully. C:\Documents and Settings\Elaine Strean\Local Settings\temp\REG1D.tmp moved successfully. File\Folder C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF9234.tmp not found! File\Folder C:\Documents and Settings\Elaine Strean\Local Settings\temp\~DF9C97.tmp not found! C:\Documents and Settings\Elaine Strean\Local Settings\Temporary Internet Files\Content.IE5\OG8O37JI\1058841-firewall-blocking-3[1].html moved successfully. File\Folder C:\WINDOWS\temp\Perflib_Perfdata_138.dat not found! Registry entries deleted on Reboot... |
Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.
If you're not already familiar with forums, watch our Welcome Guide to get started.

| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |


Email 