Malwarebytes blocking access to malicous sites

Rich50 · July 12, 2010

Elise, Hi!

I was following another thread you helped with and need help. I will be bald from yanking my hair out with this.

Malwarebytes is blocking several websites online and offline. Slows computer way down. Have run Nortons NIS 2010, Malwarebytes and Super AntiSptware all with lastest updates and still can't stop this.

IP-BLOCK 94.228.209.200

IP-BLOCK 91.212.226.67

IP-BLOCK 91.212.226.59

IP-BLOCK 94.228.209.214

IP-BLOCK 195.170.178.55

IP-BLOCK 85.12.46.158

IP-BLOCK 85.12.46.157

IP-BLOCK 85.12.46.155

IP-BLOCK 91.212.226.130

IP-BLOCK 91.212.226.178

IP-BLOCK 95.211.96.203

I have already downloaded OTL and GMER and waiting to be advised on what to do.

Thank You

Elise · July 12, 2010

Hello ,

And My name is Elise and I'll be glad to help you with your computer problems.

I will be working on your malware issues, this may or may not solve other issues you may have with your machine.

Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.

The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen.
Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic.
The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.
Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications.

-----------------------------------------------------------

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

If you have already posted a log, please do so again, as your situation may have changed.

Use the 'Add Reply' and add the new log to this thread.

We need to see some information about what is happening in your machine. Please perform the following scan:

Please download OTL from one of the following mirrors:
- This is THE Mirror
[*]Save it to your desktop.
[*]Double click on the icon on your desktop.
[*]Click the "Scan All Users" checkbox.
[*]Push the button.
[*]Two reports will open, copy and paste them in a reply here:
- OTListIt.txt <-- Will be opened
- Extra.txt <-- Will be minimized

Please download GMER from one of the following locations and save it to your desktop:

Main Mirror
This version will download a randomly named file (Recommended)
Zipped Mirror
This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.

Disconnect from the Internet and close all running programs.
Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.
GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
Now click the Scan button. If you see a rootkit warning window, click OK.
When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
Click the Copy button and paste the results into your next reply.
Exit GMER and re-enable all active protection when done.

-- If you encounter any problems, try running GMER in Safe Mode.

-------------------------------------------------------------

In the meantime please, do NOT install any new programs or update anything unless told to do so while we are fixing your problem

If you still need help, please include the following in your next reply

A detailed description of your problems
A new OTL log (don't forget extra.txt)
GMER log

Rich50 · July 13, 2010

Here is my OTL Log:

OTL logfile created on: 7/12/2010 1:08:08 PM - Run 2

OTL by OldTimer - Version 3.2.9.0 Folder = C:\Documents and Settings\Rich\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 7.0.5730.13)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

767.00 Mb Total Physical Memory | 294.00 Mb Available Physical Memory | 38.00% Memory free

2.00 Gb Paging File | 1.00 Gb Available in Paging File | 66.00% Paging File free

Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 465.75 Gb Total Space | 47.60 Gb Free Space | 10.22% Space Free | Partition Type: NTFS

Drive D: | 149.04 Gb Total Space | 34.78 Gb Free Space | 23.34% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: BOSS

Current User Name: Rich

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/07/12 10:12:03 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rich\Desktop\OTL.exe

PRC - [2010/07/02 06:36:00 | 002,403,568 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

PRC - [2010/05/31 21:26:56 | 000,061,440 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\nlssrv32.exe

PRC - [2010/05/31 21:26:56 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\ASTSRV.EXE

PRC - [2010/04/29 12:19:20 | 000,437,584 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

PRC - [2010/04/29 12:19:20 | 000,304,464 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2010/02/25 20:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe

PRC - [2010/02/11 20:28:34 | 000,016,184 | ---- | M] (Siber Systems) -- C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe

PRC - [2010/01/04 10:02:14 | 000,086,016 | ---- | M] (Software602) -- C:\Program Files\Software602\Print2PDF\Print2PDF.exe

PRC - [2008/10/25 00:35:16 | 000,605,944 | ---- | M] (iExpert Software) -- C:\Program Files\Registry Clean Expert\RCHelper.exe

PRC - [2008/09/16 22:37:36 | 001,241,088 | ---- | M] () -- C:\Program Files\WhiteSmoke\WSEnrichment.exe

PRC - [2008/08/22 14:33:08 | 001,691,648 | ---- | M] (Language Engineering Corporation, LLC) -- C:\Program Files\Power Translator 12\LogoMedia TranslateDotNet Server.exe

PRC - [2008/04/14 06:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

PRC - [2006/04/05 22:31:52 | 000,057,344 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Multimedia\main\atidtct.exe

PRC - [2006/03/30 23:44:18 | 000,651,385 | ---- | M] (Koninklijke Philips Electronics N.V.) -- C:\Program Files\CoPilot\Laptop10\App\Spot2741.exe

PRC - [2000/05/03 09:24:32 | 000,102,400 | ---- | M] (Champion Software, Inc.) -- C:\Program Files\Auto-Do-It\Notify.exe

========== Modules (SafeList) ==========

MOD - [2010/07/12 10:12:03 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rich\Desktop\OTL.exe

MOD - [2010/05/14 01:35:01 | 000,415,088 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\17.7.0.12\asoehook.dll

MOD - [2009/07/12 02:12:06 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll

MOD - [2009/07/12 00:02:02 | 000,653,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll

MOD - [2009/07/12 00:02:00 | 000,569,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll

MOD - [2008/04/14 06:40:22 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx

MOD - [2008/01/10 09:06:10 | 000,016,896 | ---- | M] (Deskperience) -- C:\Program Files\WhiteSmoke\WHook.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe -- (Roxio UPnP Renderer 11)

SRV - [2010/05/31 21:26:56 | 000,061,440 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\nlssrv32.exe -- (nlsX86cc)

SRV - [2010/05/31 21:26:56 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\ASTSRV.EXE -- (astcc)

SRV - [2010/04/29 12:19:20 | 000,304,464 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2010/02/25 20:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) [unknown | Running] -- C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exe -- (NIS)

SRV - [2010/02/19 20:30:16 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus®

SRV - [2010/02/12 15:22:35 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2009/12/16 10:09:04 | 000,188,736 | ---- | M] (Nitro PDF Software) [Auto | Stopped] -- C:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe -- (NitroDriverReadSpool)

SRV - [2008/08/22 14:33:08 | 001,691,648 | ---- | M] (Language Engineering Corporation, LLC) [Auto | Running] -- C:\Program Files\Power Translator 12\LogoMedia TranslateDotNet Server.exe -- (LEC TranslateDotNet Server)

SRV - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)

SRV - [2006/03/30 23:44:18 | 000,651,385 | ---- | M] (Koninklijke Philips Electronics N.V.) [Auto | Running] -- C:\Program Files\CoPilot\Laptop10\App\Spot2741.exe -- (SpotGPSMaxim)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btwhid.sys -- (btwhid)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btwdndis.sys -- (BTWDNDIS)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btport.sys -- (BTDriver)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\btaudio.sys -- (btaudio)

DRV - [2010/05/28 15:33:19 | 000,331,640 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100709.001\IDSXpx86.sys -- (IDSxpx86)

DRV - [2010/05/27 06:21:44 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2010/05/27 06:21:44 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2010/05/27 06:12:07 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)

DRV - [2010/05/22 14:16:04 | 000,691,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100619.001\BHDrvx86.sys -- (BHDrvx86)

DRV - [2010/05/10 20:57:33 | 001,347,504 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100711.002\NAVEX15.SYS -- (NAVEX15)

DRV - [2010/05/10 20:57:32 | 000,085,552 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\VirusDefs\20100711.002\NAVENG.SYS -- (NAVENG)

DRV - [2010/05/06 00:01:59 | 000,361,904 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\NIS\1107000.00C\SYMTDI.SYS -- (SYMTDI)

DRV - [2010/04/29 12:19:14 | 000,020,952 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2010/04/29 01:03:51 | 000,116,784 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NIS\1107000.00C\Ironx86.SYS -- (SymIRON)

DRV - [2010/04/21 23:02:20 | 000,173,104 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\NIS\1107000.00C\SYMEFA.SYS -- (SymEFA)

DRV - [2010/04/21 22:29:50 | 000,325,680 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\NIS\1107000.00C\SRTSP.SYS -- (SRTSP)

DRV - [2010/04/21 22:29:50 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NIS\1107000.00C\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)

DRV - [2010/02/25 20:22:57 | 000,501,888 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NIS\1107000.00C\ccHPx86.sys -- (ccHP)

DRV - [2010/02/18 16:12:07 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)

DRV - [2010/02/18 16:12:06 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)

DRV - [2010/02/12 13:17:58 | 000,682,232 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)

DRV - [2010/02/12 12:28:21 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2009/12/30 11:20:54 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\revoflt.sys -- (Revoflt)

DRV - [2009/09/01 10:40:42 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys -- (WsAudio_DeviceS(5)) WsAudio_DeviceS(5)

DRV - [2009/09/01 10:40:42 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys -- (WsAudio_DeviceS(4)) WsAudio_DeviceS(4)

DRV - [2009/09/01 10:40:42 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys -- (WsAudio_DeviceS(3)) WsAudio_DeviceS(3)

DRV - [2009/09/01 10:40:42 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys -- (WsAudio_DeviceS(2)) WsAudio_DeviceS(2)

DRV - [2009/09/01 10:40:42 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys -- (WsAudio_DeviceS(1)) WsAudio_DeviceS(1)

DRV - [2009/08/29 20:17:18 | 000,328,752 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\NIS\1107000.00C\SYMDS.SYS -- (SymDS)

DRV - [2008/04/14 01:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)

DRV - [2008/04/13 23:04:20 | 000,063,488 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atinxsxx.sys -- (ATIXSAudio) ATI WDM TV Audio (Microsoft Corporation) Crossbar (Microsoft Corporation)

DRV - [2008/04/13 23:04:18 | 000,104,960 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atinrvxx.sys -- (atinrvxx) ATI WDM Rage Theater Video (Microsoft Corporation)

DRV - [2008/04/13 23:04:18 | 000,073,216 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atintuxx.sys -- (ATITUNEP) ATI WDM TV Tuner (Microsoft Corporation)

DRV - [2008/04/13 23:04:18 | 000,052,224 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atinraxx.sys -- (ativraxx) ATI WDM Rage Theater Audio (Microsoft Corporation)

DRV - [2008/04/13 23:04:18 | 000,014,336 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atinpdxx.sys -- (PCDCODEC) ATI WDM Specialized PCD Codec (Microsoft Corporation)

DRV - [2008/04/13 23:04:18 | 000,013,824 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atinmdxx.sys -- (MVDCODEC) ATI WDM Specialized MVD Codec (Microsoft Corporation)

DRV - [2008/04/13 23:04:16 | 000,701,440 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)

DRV - [2005/01/13 11:06:48 | 000,035,107 | ---- | M] (Winternals) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VDiskBus.sys -- (vdiskbus)

DRV - [2003/09/22 13:43:06 | 001,330,048 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\P16X.sys -- (P16X) Creative SB Live! Series (WDM)

DRV - [2003/09/22 09:48:06 | 000,130,192 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)

DRV - [2003/09/22 09:47:38 | 000,178,672 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)

DRV - [2003/04/27 13:39:16 | 000,008,704 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\stwlfbus.sys -- (stwlfbus)

DRV - [2003/04/27 12:43:06 | 000,099,360 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\st3wolf.sys -- (st3wolf)

DRV - [2003/03/05 13:19:28 | 000,015,840 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PFMODNT.SYS -- (PfModNT)

DRV - [2002/12/16 19:11:02 | 000,076,288 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel)

DRV - [2002/12/16 19:11:02 | 000,026,120 | ---- | M] (Rainbow Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS -- (Sntnlusb)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1275210071-790525478-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://my.yahoo.com/

IE - HKU\S-1-5-21-1275210071-790525478-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1275210071-790525478-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "eBay"

FF - prefs.js..extensions.enabledItems: LECToolbar@lec.txt:1.1

FF - prefs.js..extensions.enabledItems: {EA6F5510-6F4D-11DC-B4DA-1B6D56D89593}:0.37

FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0

FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:6.3

FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\ [2010/05/25 18:21:51 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn\ [2010/02/12 12:28:40 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/07/01 08:17:12 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/07/01 08:17:12 | 000,000,000 | ---D | M]

[2010/02/17 09:08:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rich\Application Data\Mozilla\Extensions

[2010/05/19 09:08:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rich\Application Data\Mozilla\Firefox\Profiles\kghxyr0w.default\extensions

[2010/05/19 09:08:51 | 000,000,000 | ---D | M] (recipefox) -- C:\Documents and Settings\Rich\Application Data\Mozilla\Firefox\Profiles\kghxyr0w.default\extensions\{EA6F5510-6F4D-11DC-B4DA-1B6D56D89593}

[2010/05/19 08:59:33 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

[2009/11/19 17:16:28 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll

[2009/11/19 17:16:29 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll

O1 HOSTS File: ([2002/09/03 15:39:21 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)

O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coieplg.dll (Symantec Corporation)

O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ipsbho.dll (Symantec Corporation)

O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)

O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

O3 - HKLM\..\Toolbar: (LEC) - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - C:\Program Files\Power Translator 12\Applications\LEC IE Translation Extension.dll (Language Engineering Corporation, LLC)

O3 - HKLM\..\Toolbar: (&RoboForm) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)

O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coieplg.dll (Symantec Corporation)

O3 - HKU\S-1-5-21-1275210071-790525478-839522115-1003\..\Toolbar\WebBrowser: (&RoboForm) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)

O3 - HKU\S-1-5-21-1275210071-790525478-839522115-1003\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coieplg.dll (Symantec Corporation)

O4 - HKLM..\Run: [bluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

O4 - HKLM..\Run: [Print2PDF Print Monitor] C:\Program Files\Software602\Print2PDF\Print2PDF.exe (Software602)

O4 - HKU\S-1-5-21-1275210071-790525478-839522115-1003..\Run: [ADIReminder] C:\Program Files\Auto-Do-It\Notify.exe (Champion Software, Inc.)

O4 - HKU\S-1-5-21-1275210071-790525478-839522115-1003..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\atidtct.exe (ATI Technologies Inc.)

O4 - HKU\S-1-5-21-1275210071-790525478-839522115-1003..\Run: [Evernote] C:\Program Files\Evernote\Evernote3.5\evernote.exe (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)

O4 - HKU\S-1-5-21-1275210071-790525478-839522115-1003..\Run: [RegClean Expert Scheduler] C:\Program Files\Registry Clean Expert\RCHelper.exe (iExpert Software)

O4 - HKU\S-1-5-21-1275210071-790525478-839522115-1003..\Run: [RoboForm] C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)

O4 - HKU\S-1-5-21-1275210071-790525478-839522115-1003..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)

O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch WhiteSmoke.lnk = C:\Program Files\WhiteSmoke\WSEnrichment.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-1275210071-790525478-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0

O7 - HKU\S-1-5-21-1275210071-790525478-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1

O8 - Extra context menu item: Add to &Evernote - C:\Program Files\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)

O8 - Extra context menu item: Customize Menu - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()

O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()

O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()

O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()

O8 - Extra context menu item: Fill Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()

O8 - Extra context menu item: MasterCook: Select Image - C:\Documents and Settings\Rich\Local Settings\Application Data\MasterCook Web Import\MCIEContext.hta ()

O8 - Extra context menu item: Open Selected URL - C:\Program Files\RightClick GoogleSearch & OpenSelectedURL\openselectedurl.htm ()

O8 - Extra context menu item: RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()

O8 - Extra context menu item: Save Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()

O8 - Extra context menu item: Search &Google - C:\Program Files\RightClick GoogleSearch & OpenSelectedURL\google.htm ()

O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()

O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()

O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()

O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()

O9 - Extra Button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\dtv\EXPLBAR.DLL (ATI Technologies Inc.)

O9 - Extra Button: Print2PDF - {5B7027AD-AA6D-40df-8F56-9560F277D2A5} - C:\Program Files\Software602\Print2PDF\Print602.dll (Software602 a.s.)

O9 - Extra 'Tools' menuitem : Print2PDF - {5B7027AD-AA6D-40df-8F56-9560F277D2A5} - C:\Program Files\Software602\Print2PDF\Print602.dll (Software602 a.s.)

O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()

O9 - Extra 'Tools' menuitem : RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()

O9 - Extra Button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

O9 - Extra Button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)

O9 - Extra 'Tools' menuitem : Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)

O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found

O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found

O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O15 - HKU\S-1-5-21-1275210071-790525478-839522115-1003\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)

O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)

O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)

O24 - Desktop BackupWallPaper: C:\Documents and Settings\Rich\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010/02/09 22:10:05 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{0323ae9c-337f-11df-ab32-0007e97ed762}\Shell - "" = AutoRun

O33 - MountPoints2\{0323ae9c-337f-11df-ab32-0007e97ed762}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{0323ae9c-337f-11df-ab32-0007e97ed762}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found

O33 - MountPoints2\{0323ae9d-337f-11df-ab32-0007e97ed762}\Shell\AutoRun\command - "" = setupSNK.exe

O33 - MountPoints2\J\Shell - "" = AutoRun

O33 - MountPoints2\J\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/07/12 10:12:00 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Rich\Desktop\OTL.exe

[2010/07/11 12:20:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rich\Application Data\Scooter Software

[2010/07/11 12:13:36 | 000,000,000 | ---D | C] -- C:\Program Files\Beyond Compare 3

[2010/07/09 12:39:05 | 000,000,000 | ---D | C] -- C:\WinMerge v2.12.4

[2010/07/01 08:18:08 | 000,226,728 | R--- | C] (Coupons, Inc.) -- C:\WINDOWS\System32\cpnprt2.cid

[2010/07/01 08:15:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cache

[2010/07/01 08:15:20 | 000,000,000 | ---D | C] -- C:\Program Files\Coupons

[2010/06/25 19:15:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rich\Desktop\attachments_2010_06_25

[2010/06/24 12:15:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Fighters

[2010/06/23 17:32:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rich\Application Data\GetRightToGo

[2010/06/22 12:50:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rich\Application Data\Malwarebytes

[2010/06/22 12:50:07 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2010/06/22 12:50:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes

[2010/06/22 12:50:05 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2010/06/22 12:50:05 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2010/06/22 06:49:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia

[2010/06/22 06:49:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe

[2010/06/16 06:33:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution

[2010/02/10 10:00:50 | 000,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\A3d.dll

[2003/04/27 13:39:16 | 000,008,704 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\stwlfbus.sys

[2003/04/27 13:38:56 | 000,054,784 | ---- | C] ( ) -- C:\WINDOWS\daemon.dll

[2003/04/27 12:43:06 | 000,099,360 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\st3wolf.sys

[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/07/12 13:16:19 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Rich\Desktop\~$rsistent_i.doc

[2010/07/12 12:36:45 | 000,202,651 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\Persistent_i.doc

[2010/07/12 11:53:20 | 003,737,559 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\ComboFix.exe

[2010/07/12 10:39:23 | 000,000,579 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\~ Automated Profit Package ~.lnk

[2010/07/12 10:39:13 | 000,000,499 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\~ DVDS ~.lnk

[2010/07/12 10:38:57 | 000,000,539 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\~ DONGLE STUFF ~.lnk

[2010/07/12 10:14:00 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\g0w7fpvv.exe

[2010/07/12 10:12:03 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rich\Desktop\OTL.exe

[2010/07/12 09:37:33 | 018,087,936 | ---- | M] () -- C:\Documents and Settings\Rich\ntuser.dat

[2010/07/12 08:39:33 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat

[2010/07/12 06:25:42 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2010/07/12 06:25:31 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010/07/11 22:14:55 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Rich\ntuser.ini

[2010/07/11 12:44:34 | 000,150,771 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\ALL FRUIT SMOOTHIES 2 SHARE.htm

[2010/07/11 12:22:36 | 000,000,670 | ---- | M] () -- C:\Documents and Settings\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\Beyond Compare 3.lnk

[2010/07/08 08:52:42 | 000,169,984 | ---- | M] () -- C:\Documents and Settings\Rich\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010/07/08 08:50:11 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini

[2010/07/04 09:27:57 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010/07/01 08:18:08 | 000,226,728 | R--- | M] (Coupons, Inc.) -- C:\WINDOWS\System32\cpnprt2.cid

[2010/06/27 11:42:24 | 000,001,023 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\Shortcut to Logs.lnk

[2010/06/27 11:08:55 | 000,000,763 | ---- | M] () -- C:\Documents and Settings\Rich\Desktop\Shortcut to hosts.lnk

[2010/06/27 08:10:03 | 001,600,656 | -H-- | M] () -- C:\Documents and Settings\Rich\Local Settings\Application Data\IconCache.db

[2010/06/25 20:51:07 | 001,645,905 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\MustangShirts.pdf

[2010/06/25 08:49:04 | 000,008,456 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys

[2010/06/24 09:22:19 | 000,870,128 | ---- | M] () -- C:\Documents and Settings\Rich\Application Data\mcs.rma

[2010/06/24 09:22:19 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\Rich\Application Data\822E20

[2010/06/23 21:04:01 | 000,000,180 | ---- | M] () -- C:\Documents and Settings\Rich\default.pls

[2010/06/22 12:50:11 | 000,000,714 | ---- | M] () -- C:\Documents and Settings\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk

[2010/06/16 08:23:32 | 000,000,534 | ---- | M] () -- C:\Documents and Settings\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\DiffMerge.lnk

[2010/06/13 21:14:40 | 000,002,155 | ---- | M] () -- C:\Documents and Settings\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk

[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/07/12 12:36:44 | 000,202,651 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\Persistent_i.doc

[2010/07/12 11:53:14 | 003,737,559 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\ComboFix.exe

[2010/07/12 10:39:23 | 000,000,579 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\~ Automated Profit Package ~.lnk

[2010/07/12 10:39:13 | 000,000,499 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\~ DVDS ~.lnk

[2010/07/12 10:38:57 | 000,000,539 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\~ DONGLE STUFF ~.lnk

[2010/07/12 10:13:57 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\g0w7fpvv.exe

[2010/07/11 12:44:33 | 000,150,771 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\ALL FRUIT SMOOTHIES 2 SHARE.htm

[2010/07/11 12:22:36 | 000,000,670 | ---- | C] () -- C:\Documents and Settings\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\Beyond Compare 3.lnk

[2010/06/27 11:42:23 | 000,001,023 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\Shortcut to Logs.lnk

[2010/06/27 11:08:55 | 000,000,763 | ---- | C] () -- C:\Documents and Settings\Rich\Desktop\Shortcut to hosts.lnk

[2010/06/24 11:09:07 | 001,645,905 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\MustangShirts.pdf

[2010/06/22 12:50:11 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk

[2010/06/16 08:23:32 | 000,000,534 | ---- | C] () -- C:\Documents and Settings\Rich\Application Data\Microsoft\Internet Explorer\Quick Launch\DiffMerge.lnk

[2010/06/14 21:59:57 | 001,472,344 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat

[2010/06/06 19:08:52 | 000,001,133 | ---- | C] () -- C:\WINDOWS\WININIT.INI

[2010/05/07 18:42:06 | 000,000,048 | ---- | C] () -- C:\WINDOWS\PickList.ini

[2010/05/07 18:39:59 | 000,015,630 | ---- | C] () -- C:\WINDOWS\od5.ini

[2010/03/19 09:23:44 | 000,000,304 | ---- | C] () -- C:\WINDOWS\cdplayer.ini

[2010/03/05 08:22:31 | 000,000,391 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI

[2010/02/15 19:51:48 | 000,000,173 | ---- | C] () -- C:\WINDOWS\pdf2html-embedfonts.INI

[2010/02/15 14:58:19 | 000,000,379 | ---- | C] () -- C:\WINDOWS\pdf2word.INI

[2010/02/15 13:24:21 | 000,000,528 | ---- | C] () -- C:\WINDOWS\PDF2HTML.INI

[2010/02/14 22:31:42 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll

[2010/02/14 13:30:26 | 000,004,094 | ---- | C] () -- C:\WINDOWS\jfff_d64.ini

[2010/02/14 13:30:26 | 000,001,441 | ---- | C] () -- C:\WINDOWS\cqgqvh_d24.ini

[2010/02/14 12:46:00 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\uuddc32.dll

[2010/02/13 11:14:23 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2010/02/12 22:53:31 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2010/02/12 15:38:50 | 002,463,976 | ---- | C] () -- C:\WINDOWS\System32\NPSWF32.dll

[2010/02/12 15:11:47 | 000,000,679 | ---- | C] () -- C:\WINDOWS\password.ini

[2010/02/12 14:32:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PROTOCOL.INI

[2010/02/12 13:17:58 | 000,682,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys

[2010/02/12 08:23:12 | 000,000,034 | ---- | C] () -- C:\WINDOWS\Fantastic Flame Screensaver.ini

[2010/02/12 00:31:24 | 000,000,165 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI

[2010/02/11 23:58:56 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\BtLSt61.dll

[2010/02/10 22:00:07 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ATIMMC.INI

[2010/02/10 10:01:14 | 000,000,066 | ---- | C] () -- C:\WINDOWS\SBWIN.INI

[2010/02/10 10:00:50 | 000,047,616 | ---- | C] () -- C:\WINDOWS\System32\P16X.dll

[2010/02/10 10:00:50 | 000,002,696 | ---- | C] () -- C:\WINDOWS\MIXDEF.INI

[2010/02/10 10:00:50 | 000,002,516 | ---- | C] () -- C:\WINDOWS\System32\P16X.ini

[2010/02/10 10:00:50 | 000,000,026 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini

[2009/06/17 11:13:30 | 000,508,224 | ---- | C] () -- C:\WINDOWS\System32\ICCProfiles.dll

[2004/01/30 15:07:46 | 000,245,408 | ---- | C] () -- C:\WINDOWS\System32\unicows.dll

[2004/01/28 12:42:06 | 000,066,560 | ---- | C] () -- C:\WINDOWS\System32\atiyuv12.dll

[2004/01/28 12:42:06 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll

[2004/01/28 12:42:06 | 000,013,601 | ---- | C] () -- C:\WINDOWS\System32\vctest.ini

[2004/01/13 02:20:09 | 000,000,037 | ---- | C] () -- C:\WINDOWS\System32\msmd6.dll

[1998/10/23 04:46:00 | 000,047,104 | ---- | C] () -- C:\WINDOWS\System32\wh2robo.dll

[1998/05/27 21:13:34 | 000,032,256 | ---- | C] () -- C:\WINDOWS\System32\_UNODBC.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 171 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:EAD001CC

@Alternate Data Stream - 167 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C39E55C5

@Alternate Data Stream - 145 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D2F2F703

@Alternate Data Stream - 1207 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:xl4fNO0z7s1zXLnexrGETAsk

@Alternate Data Stream - 1047 bytes -> C:\Program Files\Common Files\Microsoft Shared:jifWIUKUN70QEOd2eoRlaPYigK

@Alternate Data Stream - 1006 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:urbGhlYyFgp4Z4XjYjO

< End of report >

Here is the Extras Log:

OTL Extras logfile created on: 7/12/2010 10:15:48 AM - Run 1

OTL by OldTimer - Version 3.2.9.0 Folder = C:\Documents and Settings\Rich\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 7.0.5730.13)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

767.00 Mb Total Physical Memory | 293.00 Mb Available Physical Memory | 38.00% Memory free

2.00 Gb Paging File | 1.00 Gb Available in Paging File | 62.00% Paging File free

Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 465.75 Gb Total Space | 47.62 Gb Free Space | 10.22% Space Free | Partition Type: NTFS

Drive D: | 149.04 Gb Total Space | 34.78 Gb Free Space | 23.34% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: BOSS

Current User Name: Rich

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)

htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [browse with Corel PaintShop Photo Pro X3] -- "c:\Program Files\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)

Directory [DiskInfoByPplus] -- C:\WINDOWS\System32\Shellext\ppshlext.exe "%1" /dinfo ()

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [MediaMonkey.1Play] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)

Directory [MediaMonkey.2PlayNext] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)

Directory [MediaMonkey.3Enqueue] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

"UpdatesDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe -- (Hewlett-Packard Development Co. L.P.)

"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Development Co. L.P.)

"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe -- (Hewlett-Packard Development Co. L.P.)

"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe -- (Hewlett-Packard Development Co. L.P.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)

"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)

"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe -- (Hewlett-Packard Development Co. L.P.)

"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Development Co. L.P.)

"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe -- (Hewlett-Packard Development Co. L.P.)

"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe -- (Hewlett-Packard Development Co. L.P.)

"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"_{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = Corel PaintShop Photo Pro X3

"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3

"{0224CACC-994D-45F8-B973-D65056EA9C2F}" = Adobe XMP DVA Panels CS3

"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour

"{08A6039D-A5B8-46E8-A3F9-7E2AE5C1B191}" = Nitro PDF Professional

"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting

"{08F32589-5E39-42B8-8BC5-6A8126ED2A70}" = Microsoft Visual C++ 2008 Redistributable Package

"{09BDEEF0-5590-457D-89A9-5DB2742F9BBF}" = 32 Bit HP CIO Components Installer

"{0C123C63-84FD-4D13-96E7-EEB5C11893F2}" = LEC Translate

"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox

"{11B83AD3-7A46-4C2E-A568-9505981D4C6F}" = HP Update

"{12A76360-388E-4B27-ABEB-D5FC5378DD2A}" = HPPhotoSmartPhotobookWebPack1

"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime

"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin

"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService

"{18AE8ACB-0419-45F6-9CF6-155E128A4BCE}_is1" = WinTools.net 9.11.1 Ultimate

"{193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285}" = Adobe After Effects CS3 Presets

"{195F2C6C-A343-4b10-B1A4-3F00AB9E9DD9}" = Fax

"{1DA07BCA-FD11-406E-89A8-5B4496F43FC5}" = EZ Label Xpress Lite

"{20B30DC1-E423-4939-B51D-05C58B0F9BBB}" = HP Photosmart All-In-One Driver Software 10.0 Rel .2

"{25CA5771-2536-4D47-A12F-E9AF3B5ADB81}" = MasterCook 11

"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java 6 Update 17

"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3

"{2EFFFC71-1E66-454E-A6E6-CEEC800B96D2}" = Adobe Flash Video Encoder

"{32C74893-0243-4235-A6F3-201F0E5D2C03}" = Print2PDF

"{34AFE453-F544-4269-89C9-CAB7F0744963}" = Nuance OmniPage 17

"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE

"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup

"{38F48AED-66D8-464C-993E-C7296C7A199B}" = Intel® IPP Run-Time Installer 5.2 for Windows* on IA-32

"{3a6f8a27-fa78-48a4-bbd1-399b000bcc9a}" = C8100_Help

"{3B2DACD1-BAB5-4760-BF4C-3DC9054A751C}" = Living Cookbook 2008

"{3B8F29EB-703C-4723-8CDE-4B2E5D695972}" = DxO Optics Pro 6

"{3CBA0E30-6F54-47EF-910E-1D4D450AFE45}" = ATI Multimedia Center

"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support

"{43FFE159-3199-4188-A1CD-629166AD1033}" = Nero 7 Ultra Edition

"{4458C442-7376-4CF9-AF58-E8CEA6722363}" = Adobe Setup

"{44BC4C60-6F50-439F-B442-5B4CD8A300AD}" = VOB2MPG PRO

"{4744A01E-4B17-4643-A1FA-44FF83CB316D}" = PhotoTools 2.5 Professional Edition

"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter

"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin

"{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}" = Cards_Calendar_OrderGift_DoMorePlugout

"{4ED7D297-58F7-45C3-A9BA-A7CD6FA0D373}_is1" = SureThing CD Labeler Deluxe 5

"{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC

"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings

"{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery

"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3

"{55647779-010F-4903-AA1B-76A564739E22}" = LEAD Command Line Utils

"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml

"{5AB6F784-1163-4EE6-96EB-05BAB1B46DBA}" = TouchCopy 09

"{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp

"{5C820C4F-ACEE-4C26-BFE5-1FF4CB0D20E5}" = SVCD2DVD 2.5

"{5F7DFDFA-27B3-4E06-BCDE-B371424C0032}" = OnDemand5

"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2

"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder

"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.1.5

"{677A19B8-446D-4797-A071-977A30EAD01D}" = Winternals Administrator's Pak

"{679EC478-3FF9-4987-B2FF-C2C2B27532A2}" = DocProc

"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1

"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update

"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All

"{6B437F94-056F-4791-AF2C-0D10E2706AF0}" = PanoStandAlone

"{6B52140A-F189-4945-BFFC-DB3F00B8C589}" = Adobe Flash CS3

"{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files

"{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}" = AHV content for Acrobat and Flash

"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{7A27AE24-F5B8-4ABC-B3DA-AB57BC7309FB}" = DAEMON Tools

"{7ACFB90E-8FD0-4397-AD3A-5195412623A3}" = Adobe Help Viewer CS3

"{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan

"{81063354-9060-42B2-A000-1EBE96778AA9}" = iTunes

"{81CB77FF-9789-4337-A46E-185F7876AC40}" = Adobe Photoshop Lightroom 2.6

"{81FD761C-3F60-4A3A-BD5E-8D1B1C659F05}" = VidaOne Diet and Fitness

"{845A8DB9-8802-4FD3-9FE3-938A6C46A2EC}" = Adobe Video Profiles

"{8718DC03-D066-4957-94E5-50C3C5042E8E}" = Adobe Creative Suite 3 Master Collection

"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder

"{88D422DB-E9C7-4E16-9D80-2999F4FD6AD9}" = Adobe Flash Player 9 Plugin

"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport

"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3

"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support

"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003

"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system

"{90120000-00D1-0409-0000-0000000FF1CE}" = Microsoft Office Access database engine 2007 (English)

"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3

"{909B62B0-8ACA-4061-A83B-09CAEF609619}" = MSXML 6.0 Parser

"{94824ADD-8F26-43D2-84DB-22E11F377E5E}" = Microsoft English TTS Engine

"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings

"{96172E04-BB14-45F6-A77B-8EE7A421B903}" = SAPI Wrapper

"{96E16100-A77F-4B31-B9AD-FFBA040EE1BD}" = Sound Blaster Live!

"{97D0C0A1-7E64-4B05-A2EE-61D2CE23F154}" = TTS Wrapper

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3

"{9D89EE43-B471-40EC-9550-6BD77C7BE3F4}" = WhiteSmoke

"{A07840FC-CE63-4CB8-8030-EF4B9805925A}" = HPPhotoSmartDiscLabel_PaperLabel

"{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status

"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps

"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support

"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder

"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings

"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3

"{AD6677B3-8585-4C2E-B2D1-EBB8127391F1}" = CoPilot Live - Laptop 10

"{ADFB9653-F44C-460C-BF58-189CC552DFFE}" = hpphotosmartdisclabelplugin

"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan

"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0

"{B4E91E95-A5BA-4E50-A465-DB7EFEB176E8}" = HPPhotoSmartDiscLabel_PrintOnDisc

"{B671CBFD-4109-4D35-9252-3062D3CCB7B2}" = Adobe SING CS3

"{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}" = Adobe BridgeTalk Plugin CS3

"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3

"{b9be267c-e096-4cce-a4fd-f24eec004938}" = PS_AIO_02_ProductContext

"{BE5F3842-8309-4754-92D5-83E02E6077A3}" = Adobe Extension Manager CS3

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2

"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant

"{c4549405-195f-4450-8865-6be9dc5ad136}" = PS_AIO_02_Software_Min

"{C5BD220A-EFE8-48A5-B70E-9503D535FACE}" = Adobe WAS CS3

"{C82185E8-C27B-4EF4-2010-4444BC2C2B6D}" = Microsoft Streets & Trips 2010

"{C88E49AA-41C5-4420-A08D-BE1B6C5A3A74}" = DAO

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CB3F8375-B600-4B9F-83C9-238ED1E583FD}" = Adobe InDesign CS3

"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg

"{CCF6F57B-F6B4-4508-BF45-63AAC9DE416A}" = Quicken 2010

"{cd0b9359-b716-4fd0-8e0a-09b3e312e8a4}" = PS_AIO_02_Software

"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Professional

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client

"{D1612A3D-0DCC-4055-BB6A-0036F31158A0}" = Setup

"{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = ICA

"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files

"{D3BCC13A-E4F2-45EE-846F-D143CEDDDBCB}" = DeviceIO

"{D5A31AB1-345D-47C7-A87B-036A669F6DF1}" = Adobe XMP Panels CS3

"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential

"{D7D99A66-493F-468B-BCE1-6F88612B89D5}" = Contents

"{D84B7C7E-2E4D-4002-8CA8-EED4EDB333AC}" = MLE

"{D875FFEE-2FCE-4774-902A-749198C00A68}" = PureHD

"{D94ABC2B-5CA9-48B2-9266-15AB78384D3C}" = Share

"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component

"{D9C4FA35-7C6B-4C9E-863B-58C4D7472F41}" = VIO

"{DA4A2F61-1E26-4D51-94BB-36D77678BDAD}" = PSPH10Pro

"{DA4BF4BE-3CDC-43B5-BBDA-DDDA73103111}" = Corel PaintShop Photo Pro X3

"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings

"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime

"{DCD941B6-F2E7-4FAF-B102-F7D4DE5FF99A}" = IPM_PSP_Pro

"{DCF1928A-FC01-48E7-A7E6-4651D42EF6A1}" = PSPPRO_DCRAW

"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings

"{DDAC27F9-8293-465f-A4B0-011F1D38BBA1}" = RoxioShim

"{DF8B9311-ADE7-4EDE-B121-326CAA3D225D}" = PSPPContent

"{E0267007-A6FD-4304-8131-346D1CEA6F82}" = BigOven

"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01

"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager

"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series

"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3

"{E7D576EC-A0CB-4321-B8A3-558B6D590013}" = Casino Verite Blackjack V5

"{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}" = Adobe InDesign CS3 Icon Handler

"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial

"{EF3F9770-CA7B-4c5d-8A98-49AB97216546}" = C8100

"{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy

"{F6BA8EF2-A9F8-45B7-BD59-0A15DA9F7D68}" = Omron Health Management Software

"{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote

"{FCADA4FF-142C-42A8-B73C-0A54A7F83345}" = Genuine Fractals 6.0.6 Professional Edition

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe SVG Viewer" = Adobe SVG Viewer 3.0

"Adobe_4dcfd9b7e901b57f81f667144603236" = Add or Remove Adobe Creative Suite 3 Master Collection

"AI RoboForm" = AI RoboForm (All Users)

"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.11 (Unicode)

"Auto-Do-It" = Auto-Do-It

"AutoFX PhotoGraphic Edges 6" = AutoFX PhotoGraphic Edges 6

"AutoFX Suites" = AutoFX Suites

"B91607F08995C3AE98F8399E915BD41AF388963E" = Windows Driver Package - Philips SPOT USB (03/30/2006 1.0.3.0)

"BarBack" = BarBack

"BarGenie_is1" = BarGenie 9.0

"BayGenie eBay Auction Sniper Pro Edition_is1" = BayGenie eBay Auction Sniper Pro Edition 3.3.1.8

"BeyondCompare3_is1" = Beyond Compare Version 3.1.11

"Bias Sound Soap 2 DX RTAS VST v2.01" = Bias Sound Soap 2 DX RTAS VST v2.01

"CalorieKing Nutrition and Exercise Manager" = CalorieKing Nutrition and Exercise Manager (remove only)

"Chapter Master_is1" = Chapter Master 1.2.4

"CHM To PDF PRO_is1" = CHM To PDF Converter PRO

"CollegeBAR_is1" = CollegeBAR 8.4

"CopyPod Suite" = CopyPod Suite (remove only)

"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows

"CP2101 USB to UART Bridge Controller" = CP2101 USB to UART Bridge Controller Driver Set

"CuteShield File Shredder_is1" = CuteShield File Shredder

"Daniusoft Media Converter Ultimate_is1" = Daniusoft Media Converter Ultimate(Build 2.5.1.4)

"Easy Video Joiner_is1" = Easy Video Joiner 5.21

"HP Imaging Device Functions" = HP Imaging Device Functions 10.0

"HP Photosmart Essential" = HP Photosmart Essential 3.5

"HP Smart Web Printing" = HP Smart Web Printing

"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0

"HPOCR" = OCR Software by I.R.I.S. 10.0

"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs

"ie7" = Windows Internet Explorer 7

"InstallShield_{1DA07BCA-FD11-406E-89A8-5B4496F43FC5}" = EZ Label Xpress Lite

"InstallShield_{3CBA0E30-6F54-47EF-910E-1D4D450AFE45}" = ATI Multimedia Center 9.14

"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin

"InstallShield_{AD6677B3-8585-4C2E-B2D1-EBB8127391F1}" = CoPilot Live - Laptop 10

"InstallShield_{C88E49AA-41C5-4420-A08D-BE1B6C5A3A74}" = DAO

"Internet Download Manager" = Internet Download Manager

"InvelosDVDProfiler_is1" = DVD Profiler Version 3.6.1

"iPod PC Transfer Suit_is1" = iPod PC Transfer Suit 3.4

"Jobber Computer Plus" = Jobber Computer Plus

"LAME for Audacity_is1" = LAME v3.98.2 for Audacity

"LightZone 3.7" = LightZone 3.7

"Magic ISO Maker v5.4 (build 0245)" = Magic ISO Maker v5.4 (build 0245)

"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware

"MarkAble2_is1" = MarkAble 2.2.7

"MediaMonkey_is1" = MediaMonkey 3.1

"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Mozilla Firefox (3.6)" = Mozilla Firefox (3.6)

"MP3 Splitter & Joiner Pro_is1" = MP3 Splitter & Joiner Pro 4.21

"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

"NIS" = Norton Internet Security

"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs

"NSIS_oald8" = Oxford Advanced Learner's Dictionary - 8th Edition

"Portrait Professional Studio 9_is1" = Portrait Professional Studio 9.0

"ProChef Plus_is1" = ProChef Plus

"Professor PC - Typing Tutor_is1" = Professor PC - Typing Tutor v1.52

"PropertiesPlus" = PropertiesPlus (Remove Only)

"PROSet" = Intel® PRO Ethernet Adapter and Software

"Protected Music Converter_is1" = Protected Music Converter 1.0.0.9

"Rainbow Sentinel Driver" = Sentinel System Driver

"Recover My iPod_is1" = Recover My iPod

"Registry Clean Expert_is1" = Registry Clean Expert

"Tansee iPod Copy_is1" = Tansee iPod Copy v1.01

"The Ultimate Troubleshooter" = The Ultimate Troubleshooter

"tv_enua" = Lernout & Hauspie TruVoice American English TTS Engine

"Unlocker" = Unlocker 1.8.6

"V CAST Music with Rhapsody" = V CAST Music with Rhapsody

"VeryPDF PDF2HTML v2.0_is1" = VeryPDF PDF2HTML v2.0

"VeryPDF PDF2Word v3.0_is1" = VeryPDF PDF2Word v3.0

"Windows Media Encoder 9" = Windows Media Encoder 9 Series

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows Media Player" = Windows Media Player 11

"Windows XP Service Pack" = Windows XP Service Pack 3

"WinISO_is1" = WinISO 5.3

"WinMerge_is1" = WinMerge 2.12.4

"WinRAR archiver" = WinRAR archiver

"WMFDist11" = Windows Media Format 11 runtime

"wmp11" = Windows Media Player 11

"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1275210071-790525478-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Living Cookbook 2008" = Living Cookbook 2008

========== Last 10 Event Log Errors ==========

[ Application Events ]

Error - 5/11/2010 8:14:26 AM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module mshtml.dll, version 6.0.2900.5512, fault address 0x00207ff2.

Error - 5/12/2010 6:53:20 PM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module mshtml.dll, version 6.0.2900.5512, fault address 0x00207ff2.

Error - 5/13/2010 8:23:33 AM | Computer Name = BOSS | Source = MsiInstaller | ID = 11722

Description = Product: PlayOn -- Error 1722.There is a problem with this Windows

Installer package. A program run as part of the setup did not finish as expected.

Contact your support personnel or package vendor. Action PrepInstall, location:

C:\WINDOWS\Installer\MSI18B.tmp, command: /prepinstall

Error - 5/13/2010 5:25:31 PM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module mshtml.dll, version 6.0.2900.5512, fault address 0x00207ff2.

Error - 5/14/2010 4:56:53 PM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module unknown, version 0.0.0.0, fault address 0x0002003e.

Error - 5/14/2010 5:15:28 PM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module mshtml.dll, version 6.0.2900.5512, fault address 0x00207ff2.

Error - 5/15/2010 8:38:26 PM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module mshtml.dll, version 6.0.2900.5512, fault address 0x00207ff2.

Error - 5/16/2010 9:45:21 AM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module mshtml.dll, version 6.0.2900.5512, fault address 0x00207ff2.

Error - 5/16/2010 3:11:26 PM | Computer Name = BOSS | Source = Application Error | ID = 1000

Description = Faulting application iexplore.exe, version 6.0.2900.5512, faulting

module mshtml.dll, version 6.0.2900.5512, fault address 0x00207ff2.

Error - 5/16/2010 7:29:59 PM | Computer Name = BOSS | Source = Application Error | ID = 1000