gqsmooth Posted August 28, 2010 ID:305856 Share Posted August 28, 2010 Hi all. I have a pretty new Dell Studio 1440 Running Windows 7 Ultimate 32bit. My CPU always seem to be pegged at 100% even when the TaskManager says I only have about 30% running on various programs. I decided to run HJT just to see if anyone saw anything off in the logs....Thanks in advance.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 9:35:48 PM, on 8/27/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exeC:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exeC:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exeC:\Program Files (x86)\uTorrent\uTorrent.exeC:\Program Files (x86)\AVG\AVG9\avgtray.exeC:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files (x86)\Common Files\Java\Java Update\jusched.exeC:\Program Files (x86)\EventGhost\EventGhost.exeC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Users\G\Desktop\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exeO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dllO2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dllO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: FAIESSO Helper Object - {A2F122DA-055F-4df7-8F24-7354DBDBA85B} - c:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dllO4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [FATrayAlert] c:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exeO4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /rO4 - HKLM\..\Run: [updReg] C:\Windows\UpdReg.EXEO4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exeO4 - HKLM\..\Run: [WD Drive Manager] C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottimeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"O4 - HKCU\..\Run: [Google Update] "C:\Users\G\AppData\Local\Google\Update\GoogleUpdate.exe" /cO4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')O4 - Startup: EventGhost.lnk = C:\Program Files (x86)\EventGhost\EventGhost.exeO4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exeO4 - Startup: Stardock ObjectDock.lnk = C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exeO4 - Startup: ted - Shortcut.lnk = C:\Program Files (x86)\Torrent Episode Downloader\ted.exeO4 - Startup: uTorrent - Shortcut.lnk = C:\Program Files (x86)\uTorrent\uTorrent.exeO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dllO20 - Winlogon Notify: FastAccess - c:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dllO23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeO23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exeO23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exeO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exeO23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exeO23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exeO23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exeO23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)O23 - Service: FAService - Sensible Vision - c:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exeO23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)O23 - Service: Sound Blaster X-Fi MB Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exeO23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exeO23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)O23 - Service: WD Drive Manager Service (WDBtnMgrSvc.exe) - WDC - C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exeO23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXEO23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)--End of file - 9656 bytes Link to post Share on other sites More sharing options...
Elise Posted August 28, 2010 ID:305978 Share Posted August 28, 2010 Hello , And My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. -----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Please download OTL from one of the following mirrors:This is THE Mirror[*]Save it to your desktop.[*]Double click on the icon on your desktop.[*]Click the "Scan All Users" checkbox.[*]Push the button.[*]Two reports will open, copy and paste them in a reply here:OTListIt.txt <-- Will be openedExtra.txt <-- Will be minimizedPlease download Rootkit Unhooker and save it to your DesktopDouble-click on RKUnhookerLE to run itClick the Report tab, then click ScanCheck Drivers, Stealth and uncheck the restClick OKWait until it's finished and then go to File > Save ReportSave the report to your DesktopCopy the entire contents of the report and paste it in a reply here.Note - you may get this warning it is ok, just ignore: "Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?"-------------------------------------------------------------In the meantime please, do NOT install any new programs or update anything unless told to do so while we are fixing your problemIf you still need help, please include the following in your next replyA detailed description of your problemsA new OTL log (don't forget extra.txt)RKU logThanks and again sorry for the delay. Link to post Share on other sites More sharing options...
gqsmooth Posted August 28, 2010 Author ID:306140 Share Posted August 28, 2010 Hello Elise,Thanks for helping me out. Here are the logs you requested.OTL logfile created on: 8/28/2010 2:53:08 PM - Run 1OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\G\Desktop64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstationInternet Explorer (Version = 8.0.7600.16385)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 49.00% Memory free5.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data]%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)Drive C: | 218.20 Gb Total Space | 162.54 Gb Free Space | 74.49% Space Free | Partition Type: NTFSD: Drive not present or media not loadedDrive E: | 1863.01 Gb Total Space | 890.14 Gb Free Space | 47.78% Space Free | Partition Type: NTFSDrive F: | 465.76 Gb Total Space | 272.20 Gb Free Space | 58.44% Space Free | Partition Type: NTFSG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loadedComputer Name: GABECurrent User Name: GLogged in as Administrator.Current Boot Mode: NormalScan Mode: All usersInclude 64bit ScansCompany Name Whitelist: OffSkip Microsoft Files: OffFile Age = 30 DaysOutput = Standard========== Processes (SafeList) ==========PRC - [2010/08/28 14:51:21 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\G\Desktop\OTL.exePRC - [2010/07/24 01:08:23 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exePRC - [2010/07/24 01:08:23 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exePRC - [2010/07/21 18:36:58 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgemc.exePRC - [2010/07/16 08:58:14 | 002,065,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgtray.exePRC - [2010/07/16 08:58:09 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exePRC - [2010/07/16 08:58:06 | 000,723,296 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exePRC - [2010/06/11 16:21:16 | 000,083,440 | ---- | M] (Google) -- C:\Users\G\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exePRC - [2010/04/16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exePRC - [2009/07/05 17:12:26 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exePRC - [2009/06/24 18:31:44 | 001,942,792 | ---- | M] (Sensible Vision ) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exePRC - [2009/06/24 18:31:44 | 000,095,496 | ---- | M] (Sensible Vision ) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exePRC - [2009/06/24 18:31:22 | 002,368,776 | ---- | M] (Sensible Vision ) -- c:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exePRC - [2009/06/24 18:21:38 | 000,409,744 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exePRC - [2009/05/19 12:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exePRC - [2007/04/30 20:43:54 | 003,450,608 | ---- | M] (Stardock) -- C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe========== Modules (SafeList) ==========MOD - [2010/08/28 14:51:21 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\G\Desktop\OTL.exeMOD - [2009/07/13 21:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocxMOD - [2009/07/13 21:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll========== Win32 Services (SafeList) ==========SRV:64bit: - [2009/07/16 21:06:22 | 000,033,280 | ---- | M] () [Auto | Running] -- C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE -- (wltrysvc)SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)SRV:64bit: - [2009/06/29 00:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe -- (STacSV)SRV:64bit: - [2009/05/27 12:38:12 | 000,118,784 | ---- | M] (WDC) [Auto | Running] -- C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe -- (WDBtnMgrSvc.exe)SRV - [2010/07/21 18:36:58 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe -- (avg9emc)SRV - [2010/07/16 08:58:09 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe -- (avg9wd)SRV - [2010/04/16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)SRV - [2009/12/22 11:01:22 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)SRV - [2009/12/22 11:00:32 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)SRV - [2009/12/22 10:59:25 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe -- (Sound Blaster X-Fi MB Licensing Service)SRV - [2009/07/05 17:12:26 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)SRV - [2009/06/24 18:31:22 | 002,368,776 | ---- | M] (Sensible Vision ) [Auto | Running] -- c:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe -- (FAService)SRV - [2009/05/19 12:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)========== Driver Services (SafeList) ==========DRV:64bit: - [2010/07/16 08:58:14 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (AvgTdiA)DRV:64bit: - [2010/07/16 08:58:07 | 000,269,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (AvgLdx64)DRV:64bit: - [2010/06/02 23:50:07 | 000,035,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (AvgMfx64)DRV:64bit: - [2010/04/12 14:30:13 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)DRV:64bit: - [2009/10/16 02:33:06 | 000,050,176 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)DRV:64bit: - [2009/07/16 21:06:20 | 000,022,520 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bcm42rly.sys -- (BCM42RLY)DRV:64bit: - [2009/07/16 21:06:18 | 002,769,400 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)DRV:64bit: - [2009/07/13 21:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)DRV:64bit: - [2009/07/13 21:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)DRV:64bit: - [2009/07/13 21:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)DRV:64bit: - [2009/06/29 00:44:38 | 000,487,424 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)DRV:64bit: - [2009/06/15 15:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)DRV:64bit: - [2009/05/22 10:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)DRV:64bit: - [2009/05/18 15:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)DRV:64bit: - [2009/05/11 14:49:20 | 000,081,952 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)DRV:64bit: - [2009/04/02 14:39:42 | 000,234,032 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)DRV:64bit: - [2008/09/24 22:36:14 | 000,238,848 | ---- | M] (Sensible Vision ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\facap.sys -- (FACAP)DRV:64bit: - [2007/05/14 17:06:18 | 000,027,520 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)DRV:64bit: - [2006/11/01 14:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)========== Standard Registry (SafeList) ==================== Internet Explorer ==========IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmIE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1IE - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1IE - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local========== FireFox ==========FF - prefs.js..browser.search.useDBForOrder: trueFF - prefs.js..browser.startup.homepage: "http://www.google.com/"FF - prefs.js..extensions.enabledItems: YoutubeDownloader@PeterOlayev.com:1.4FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.9FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20FF - prefs.js..extensions.enabledItems: foxmarks@kei.com:3.6.14FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/07/24 01:08:23 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/07/24 01:08:23 | 000,000,000 | ---D | M][2009/12/31 17:23:04 | 000,000,000 | ---D | M] -- C:\Users\G\AppData\Roaming\mozilla\Extensions[2010/08/27 18:56:21 | 000,000,000 | ---D | M] -- C:\Users\G\AppData\Roaming\mozilla\Firefox\Profiles\2w7dswk4.default\extensions[2010/05/12 22:13:15 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\G\AppData\Roaming\mozilla\Firefox\Profiles\2w7dswk4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}[2010/04/01 23:49:53 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\G\AppData\Roaming\mozilla\Firefox\Profiles\2w7dswk4.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}[2010/05/12 22:13:14 | 000,000,000 | ---D | M] -- C:\Users\G\AppData\Roaming\mozilla\Firefox\Profiles\2w7dswk4.default\extensions\foxmarks@kei.com[2010/04/17 14:19:11 | 000,000,000 | ---D | M] -- C:\Users\G\AppData\Roaming\mozilla\Firefox\Profiles\2w7dswk4.default\extensions\YoutubeDownloader@PeterOlayev.com[2010/08/16 21:58:02 | 000,001,504 | ---- | M] () -- C:\Users\G\AppData\Roaming\Mozilla\FireFox\Profiles\2w7dswk4.default\searchplugins\imdb.xml[2010/08/16 21:57:19 | 000,004,140 | ---- | M] () -- C:\Users\G\AppData\Roaming\Mozilla\FireFox\Profiles\2w7dswk4.default\searchplugins\youtube.xml[2010/08/26 21:24:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions[2010/06/15 19:22:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}[2010/08/26 21:24:13 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}[2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dllO1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hostsO2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)O2 - BHO: (FAIESSOHelper Class) - {A2F122DA-055F-4df7-8F24-7354DBDBA85B} - c:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.O3 - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)O4:64bit: - HKLM..\Run: [broadcom Wireless Manager UI] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)O4:64bit: - HKLM..\Run: [RunDLLEntry] C:\Windows\system32\AmbRunE.DLL File not foundO4:64bit: - HKLM..\Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)O4 - HKLM..\Run: [FAStartup] File not foundO4 - HKLM..\Run: [FATrayAlert] c:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe (Sensible Vision )O4 - HKLM..\Run: [updReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Creative Technology Ltd)O4 - HKLM..\Run: [WD Drive Manager] C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe (WDC)O4 - HKU\S-1-5-19..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)O4 - HKU\S-1-5-20..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not foundO4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not foundO4 - Startup: C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EventGhost.lnk = C:\Program Files (x86)\EventGhost\EventGhost.exe (EventGhost Project)O4 - Startup: C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe ()O4 - Startup: C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe (Stardock)O4 - Startup: C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ted - Shortcut.lnk = C:\Program Files (x86)\Torrent Episode Downloader\ted.exe (Roel & Joost)O4 - Startup: C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uTorrent - Shortcut.lnk = C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3O7 - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2O7 - HKU\S-1-5-21-3889846026-2967361023-1872855690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)O13 - gopher Prefix: missingO13 - gopher Prefix: missingO16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_14)O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_14)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.)O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_21)O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_21)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_21)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 167.206.245.130 167.206.245.129O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not foundO20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not foundO20 - Winlogon\Notify\FastAccess: DllName - c:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll - c:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll ()O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.O32 - HKLM CDRom: AutoRun - 1O34 - HKLM BootExecute: (autocheck autochk *) - File not foundO35:64bit: - HKLM\..comfile [open] -- "%1" %*O35:64bit: - HKLM\..exefile [open] -- "%1" %*O35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*O37 - HKLM\...com [@ = comfile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %*========== Files/Folders - Created Within 30 Days ==========[2010/08/28 14:51:13 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\G\Desktop\OTL.exe[2010/08/27 21:31:24 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\G\Desktop\HijackThis.exe[2010/08/26 23:12:53 | 000,000,000 | ---D | C] -- C:\Users\G\AppData\Roaming\XBMC[2010/08/26 23:11:53 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll[2010/08/26 23:11:53 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll[2010/08/26 23:11:52 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll[2010/08/26 23:11:52 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll[2010/08/26 23:11:48 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll[2010/08/26 23:11:48 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll[2010/08/26 23:11:42 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll[2010/08/26 23:11:42 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll[2010/08/26 23:11:35 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll[2010/08/26 23:11:35 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll[2010/08/26 23:11:30 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll[2010/08/26 23:11:30 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll[2010/08/26 23:11:24 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll[2010/08/26 23:11:24 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll[2010/08/26 23:11:16 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll[2010/08/26 23:11:16 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll[2010/08/26 23:11:05 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll[2010/08/26 23:11:05 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll[2010/08/26 23:11:05 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll[2010/08/26 23:11:05 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll[2010/08/26 23:10:57 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll[2010/08/26 23:10:57 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll[2010/08/26 23:10:51 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll[2010/08/26 23:10:51 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll[2010/08/26 23:10:37 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll[2010/08/26 23:10:37 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll[2010/08/26 23:10:30 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll[2010/08/26 23:10:30 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll[2010/08/26 23:10:22 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll[2010/08/26 23:10:22 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll[2010/08/26 23:10:10 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll[2010/08/26 23:10:10 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll[2010/08/26 23:10:06 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll[2010/08/26 23:10:06 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll[2010/08/26 23:10:02 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll[2010/08/26 23:10:02 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll[2010/08/26 23:09:57 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll[2010/08/26 23:09:57 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll[2010/08/26 23:09:50 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll[2010/08/26 23:09:50 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll[2010/08/26 23:09:50 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll[2010/08/26 23:09:50 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll[2010/08/26 23:09:40 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll[2010/08/26 23:09:40 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll[2010/08/26 23:09:31 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll[2010/08/26 23:09:31 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll[2010/08/26 23:09:31 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll[2010/08/26 23:09:31 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll[2010/08/26 23:09:27 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll[2010/08/26 23:09:27 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll[2010/08/26 23:09:24 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll[2010/08/26 23:09:24 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll[2010/08/26 23:09:19 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll[2010/08/26 23:09:19 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll[2010/08/26 23:09:19 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll[2010/08/26 23:09:19 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll[2010/08/26 23:09:08 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll[2010/08/26 23:09:08 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll[2010/08/26 23:08:58 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll[2010/08/26 23:08:58 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll[2010/08/26 23:08:58 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll[2010/08/26 23:08:58 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll[2010/08/26 23:08:52 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll[2010/08/26 23:08:52 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll[2010/08/26 23:08:49 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll[2010/08/26 23:08:49 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll[2010/08/26 23:08:41 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll[2010/08/26 23:08:41 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll[2010/08/26 23:08:41 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll[2010/08/26 23:08:41 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll[2010/08/26 23:08:36 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll[2010/08/26 23:08:36 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll[2010/08/26 23:08:33 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll[2010/08/26 23:08:33 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll[2010/08/26 23:08:33 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll[2010/08/26 23:08:33 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll[2010/08/26 23:08:27 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll[2010/08/26 23:08:27 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll[2010/08/26 23:08:21 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll[2010/08/26 23:08:21 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll[2010/08/26 23:08:21 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll[2010/08/26 23:08:21 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll[2010/08/26 23:08:17 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll[2010/08/26 23:08:17 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll[2010/08/26 23:08:14 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll[2010/08/26 23:08:14 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll[2010/08/26 23:08:03 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll[2010/08/26 23:08:03 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll[2010/08/26 23:08:03 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll[2010/08/26 23:08:03 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll[2010/08/26 23:07:54 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll[2010/08/26 23:07:54 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll[2010/08/26 23:07:50 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll[2010/08/26 23:07:50 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll[2010/08/26 23:07:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll[2010/08/26 23:07:46 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll[2010/08/26 23:07:43 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll[2010/08/26 23:07:43 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll[2010/08/26 23:07:39 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll[2010/08/26 23:07:39 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll[2010/08/26 23:07:39 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll[2010/08/26 23:07:39 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll[2010/08/26 23:07:33 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll[2010/08/26 23:07:33 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll[2010/08/26 23:07:29 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll[2010/08/26 23:07:29 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll[2010/08/26 23:07:21 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll[2010/08/26 23:07:21 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll[2010/08/26 23:07:21 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll[2010/08/26 23:07:21 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll[2010/08/26 23:07:13 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll[2010/08/26 23:07:13 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll[2010/08/26 23:07:04 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll[2010/08/26 23:07:04 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll[2010/08/26 23:06:58 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll[2010/08/26 23:06:58 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll[2010/08/26 23:06:58 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll[2010/08/26 23:06:58 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll[2010/08/26 23:06:52 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll[2010/08/26 23:06:52 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll[2010/08/26 23:06:45 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll[2010/08/26 23:06:45 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll[2010/08/26 23:06:45 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll[2010/08/26 23:06:45 | 000,018,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_2.dll[2010/08/26 23:06:41 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll[2010/08/26 23:06:41 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll[2010/08/26 23:06:40 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll[2010/08/26 23:06:40 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll[2010/08/26 23:06:35 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll[2010/08/26 23:06:35 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll[2010/08/26 23:06:32 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll[2010/08/26 23:06:32 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll[2010/08/26 23:06:27 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll[2010/08/26 23:06:27 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll[2010/08/26 23:06:23 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll[2010/08/26 23:06:23 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll[2010/08/26 23:06:23 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll[2010/08/26 23:06:23 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll[2010/08/26 23:06:16 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll[2010/08/26 23:06:16 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll[2010/08/26 23:06:03 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll[2010/08/26 23:06:03 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll[2010/08/26 23:05:57 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll[2010/08/26 23:05:57 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll[2010/08/26 23:05:55 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll[2010/08/26 23:05:55 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll[2010/08/26 23:05:49 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll[2010/08/26 23:05:49 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll[2010/08/26 23:05:49 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll[2010/08/26 23:05:49 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll[2010/08/26 23:05:43 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll[2010/08/26 23:05:43 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll[2010/08/26 23:05:39 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll[2010/08/26 23:05:39 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll[2010/08/26 23:05:35 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll[2010/08/26 23:05:35 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll[2010/08/26 23:05:29 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll[2010/08/26 23:05:29 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll[2010/08/26 23:05:20 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll[2010/08/26 23:05:20 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll[2010/08/26 23:05:11 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll[2010/08/26 23:05:11 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll[2010/08/26 23:04:44 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll[2010/08/26 23:04:44 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll[2010/08/26 23:04:36 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll[2010/08/26 23:04:36 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll[2010/08/26 23:04:36 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll[2010/08/26 23:04:36 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll[2010/08/26 23:04:27 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll[2010/08/26 23:04:27 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll[2010/08/26 23:04:16 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll[2010/08/26 23:04:16 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll[2010/08/26 23:04:08 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll[2010/08/26 23:04:08 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll[2010/08/26 23:03:59 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll[2010/08/26 23:03:59 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll[2010/08/26 23:03:52 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll[2010/08/26 23:03:52 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll[2010/08/26 23:03:47 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll[2010/08/26 23:03:47 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll[2010/08/26 22:45:00 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx[2010/08/26 22:43:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XBMC[2010/08/26 22:08:37 | 000,000,000 | ---D | C] -- C:\Users\G\AppData\Roaming\EventGhost[2010/08/26 22:06:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EventGhost[2010/08/26 21:59:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SWF Studio[2010/08/26 21:58:12 | 000,000,000 | ---D | C] -- C:\Users\G\Documents\theRenamer[2010/08/26 21:58:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\theRenamer[2010/08/26 21:24:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java[2010/08/26 21:24:04 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe[2010/08/26 21:24:04 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe[2010/08/26 21:24:04 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe[2010/08/26 21:16:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Torrent Episode Downloader[2010/08/26 18:25:52 | 000,000,000 | ---D | C] -- C:\Program Files\PeerGuardian2[2010/08/26 18:23:58 | 000,000,000 | ---D | C] -- C:\Users\G\Documents\ted[2010/08/26 18:14:10 | 000,000,000 | ---D | C] -- C:\Users\G\AppData\Roaming\Torrent Episode Downloader[2010/08/25 18:28:02 | 000,000,000 | ---D | C] -- C:\Users\G\Desktop\Media Center[2010/08/16 22:34:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent[2010/08/13 22:17:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight[2010/08/11 00:20:37 | 005,507,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe[2010/08/11 00:20:36 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe[2010/08/11 00:20:36 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe[2010/08/11 00:20:30 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll[2010/08/11 00:20:30 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll[2010/08/11 00:20:30 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll[2010/08/11 00:20:30 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll[2010/08/11 00:20:30 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe[2010/08/11 00:20:29 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe[2010/08/11 00:20:27 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll[2010/08/11 00:20:27 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll[2010/08/11 00:20:26 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll[2010/08/10 17:52:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDFab 7[2010/08/04 23:32:52 | 000,000,000 | ---D | C] -- C:\Users\G\AppData\Roaming\vlc[2010/04/12 14:42:38 | 008,653,312 | ---- | C] (Dell, Inc. ) -- C:\Users\G\AppData\Roaming\DataSafeDotNet.exe[2010/02/16 19:59:55 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\G\AppData\Roaming\pcouffin.sys========== Files - Modified Within 30 Days ==========[2010/08/28 14:54:24 | 001,835,008 | -HS- | M] () -- C:\Users\G\ntuser.dat[2010/08/28 14:52:21 | 000,133,632 | ---- | M] () -- C:\Users\G\Desktop\RKUnhookerLE.EXE[2010/08/28 14:51:21 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\G\Desktop\OTL.exe[2010/08/28 14:31:00 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3889846026-2967361023-1872855690-1000UA.job[2010/08/28 14:06:09 | 000,000,840 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3889846026-2967361023-1872855690-1000Core.job[2010/08/28 14:05:47 | 064,032,736 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm[2010/08/28 14:00:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat[2010/08/27 22:16:19 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0[2010/08/27 22:16:19 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0[2010/08/27 22:09:13 | 000,000,429 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics[2010/08/27 22:08:58 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT[2010/08/27 22:08:26 | 2213,302,272 | -HS- | M] () -- C:\hiberfil.sys[2010/08/27 22:06:50 | 002,433,601 | -H-- | M] () -- C:\Users\G\AppData\Local\IconCache.db[2010/08/27 21:31:27 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\G\Desktop\HijackThis.exe[2010/08/27 20:46:12 | 000,000,977 | ---- | M] () -- C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EventGhost.lnk[2010/08/27 20:37:31 | 000,007,602 | ---- | M] () -- C:\Users\G\AppData\Local\Resmon.ResmonCfg[2010/08/26 22:39:44 | 000,001,400 | ---- | M] () -- C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uTorrent - Shortcut.lnk[2010/08/26 22:39:25 | 000,001,543 | ---- | M] () -- C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ted - Shortcut.lnk[2010/08/26 22:36:06 | 000,011,755 | ---- | M] () -- C:\Users\G\Documents\XBMC.xml[2010/08/25 18:44:33 | 000,713,888 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI[2010/08/25 18:44:33 | 000,615,360 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat[2010/08/25 18:44:33 | 000,103,702 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat[2010/08/12 08:28:56 | 000,312,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT[2010/08/10 17:52:10 | 000,099,384 | ---- | M] () -- C:\Users\G\AppData\Roaming\inst.exe[2010/08/10 17:52:10 | 000,082,816 | ---- | M] (VSO Software) -- C:\Users\G\AppData\Roaming\pcouffin.sys[2010/08/10 17:52:10 | 000,007,859 | ---- | M] () -- C:\Users\G\AppData\Roaming\pcouffin.cat[2010/08/10 17:52:10 | 000,001,167 | ---- | M] () -- C:\Users\G\AppData\Roaming\pcouffin.inf[2010/08/10 17:52:07 | 000,000,921 | ---- | M] () -- C:\Users\G\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 7.lnk[2010/08/04 21:37:43 | 000,000,000 | -H-- | M] () -- C:\ProgramData\PKP_DLdw.DAT[2010/08/04 21:37:43 | 000,000,000 | ---- | M] () -- C:\Users\G\AppData\Roaming\Analog Swirl[2010/08/04 21:37:43 | 000,000,000 | ---- | M] () -- C:\ProgramData\Analog Pad[2010/08/04 21:37:43 | 000,000,000 | ---- | M] () -- C:\ProgramData\Abstract========== Files Created - No Company Name ==========[2010/08/28 14:52:20 | 000,133,632 | ---- | C] () -- C:\Users\G\Desktop\RKUnhookerLE.EXE[2010/08/27 20:46:12 | 000,000,977 | ---- | C] () -- C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EventGhost.lnk[2010/08/26 22:39:44 | 000,001,400 | ---- | C] () -- C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uTorrent - Shortcut.lnk[2010/08/26 22:39:25 | 000,001,543 | ---- | C] () -- C:\Users\G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ted - Shortcut.lnk[2010/08/26 22:36:05 | 000,011,755 | ---- | C] () -- C:\Users\G\Documents\XBMC.xml[2010/08/10 17:52:07 | 000,000,921 | ---- | C] () -- C:\Users\G\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 7.lnk[2010/08/04 21:37:43 | 000,000,000 | ---- | C] () -- C:\ProgramData\Analog Pad[2010/08/04 21:37:43 | 000,000,000 | ---- | C] () -- C:\ProgramData\Abstract[2010/07/25 13:55:09 | 000,000,000 | -H-- | C] () -- C:\ProgramData\PKP_DLdw.DAT[2010/07/25 13:55:09 | 000,000,000 | ---- | C] () -- C:\Users\G\AppData\Roaming\Analog Swirl[2010/02/16 20:00:06 | 000,000,034 | ---- | C] () -- C:\Users\G\AppData\Roaming\pcouffin.log[2010/02/16 19:59:55 | 000,099,384 | ---- | C] () -- C:\Users\G\AppData\Roaming\inst.exe[2010/02/16 19:59:55 | 000,007,859 | ---- | C] () -- C:\Users\G\AppData\Roaming\pcouffin.cat[2010/02/16 19:59:55 | 000,001,167 | ---- | C] () -- C:\Users\G\AppData\Roaming\pcouffin.inf[2010/01/22 19:07:49 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib[2010/01/14 20:11:04 | 000,020,992 | ---- | C] () -- C:\Windows\jestertb.dll[2010/01/01 01:07:25 | 000,007,602 | ---- | C] () -- C:\Users\G\AppData\Local\Resmon.ResmonCfg[2009/12/22 11:03:53 | 000,002,265 | ---- | C] () -- C:\Windows\FF08_Render_Spk_Hp.ini[2009/12/22 11:03:53 | 000,001,650 | ---- | C] () -- C:\Windows\FF08_Capture.ini[2009/12/22 11:03:53 | 000,001,540 | ---- | C] () -- C:\Windows\FF08_Render.ini[2009/12/22 11:01:32 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL[2009/12/22 11:01:32 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll[2009/06/24 18:32:34 | 000,089,352 | ---- | C] () -- C:\Windows\SysWow64\FAIEExtension.dll[2009/06/24 18:31:46 | 000,059,144 | ---- | C] () -- C:\Windows\SysWow64\FAib.dll[2009/06/24 18:31:00 | 000,234,760 | ---- | C] () -- C:\Windows\SysWow64\FACrashRpt.dll< End of report >OTL Extras logfile created on: 8/28/2010 2:53:08 PM - Run 1OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\G\Desktop64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstationInternet Explorer (Version = 8.0.7600.16385)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 49.00% Memory free5.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data]%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)Drive C: | 218.20 Gb Total Space | 162.54 Gb Free Space | 74.49% Space Free | Partition Type: NTFSD: Drive not present or media not loadedDrive E: | 1863.01 Gb Total Space | 890.14 Gb Free Space | 47.78% Space Free | Partition Type: NTFSDrive F: | 465.76 Gb Total Space | 272.20 Gb Free Space | 58.44% Space Free | Partition Type: NTFSG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loadedComputer Name: GABECurrent User Name: GLogged in as Administrator.Current Boot Mode: NormalScan Mode: All usersInclude 64bit ScansCompany Name Whitelist: OffSkip Microsoft Files: OffFile Age = 30 DaysOutput = Standard========== Extra Registry (SafeList) ==================== File Associations ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)[HKEY_USERS\S-1-5-21-3889846026-2967361023-1872855690-1000\SOFTWARE\Classes\<extension>].html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)========== Shell Spawning ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %* File not foundcmdfile [open] -- "%1" %* File not foundcomfile [open] -- "%1" %* File not foundexefile [open] -- "%1" %* File not foundhelpfile [open] -- Reg Error: Key error.htmlfile [edit] -- Reg Error: Key error.htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not foundinffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)piffile [open] -- "%1" %* File not foundregfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1" File not foundscrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)scrfile [open] -- "%1" /S File not foundtxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not foundDirectory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Folder [explore] -- Reg Error: Value error.Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %*cmdfile [open] -- "%1" %*comfile [open] -- "%1" %*cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)exefile [open] -- "%1" %*helpfile [open] -- Reg Error: Key error.htmlfile [edit] -- Reg Error: Key error.htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)piffile [open] -- "%1" %*regfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)scrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Folder [explore] -- Reg Error: Value error.Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)========== Security Center Settings ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"cval" = 164bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]"AntiVirusOverride" = 0"AntiSpywareOverride" = 0"FirewallOverride" = 064bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"DisableNotifications" = 0"EnableFirewall" = 1[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"DisableNotifications" = 0"EnableFirewall" = 1[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]"DisableNotifications" = 0"EnableFirewall" = 1========== Authorized Applications List ==================== HKEY_LOCAL_MACHINE Uninstall List ==========64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)"{23170F69-40C1-2702-0465-000001000000}" = 7-Zip 4.65 (x64 edition)"{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java 6 Update 14 (64-bit)"{404BB1FF-A84F-432F-B77B-301E88E8D1C7}" = Apple Mobile Device Support"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer"{96D5EB02-DE18-4DCD-A713-929B4461CA8D}" = iTunes"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad"{AAE967F9-BE1C-45F7-9802-6064ECB2AD72}" = WD Drive Manager (x64)"{B4735ADA-2C32-4DB1-809C-D3D424343ED9}" = FastAccess"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053"{C19D4D8F-4433-4F6D-9F0C-79589FD0B973}" = Bonjour"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148"Dell Wireless WLAN Card Utility" = Dell Wireless WLAN Card Utility"NVIDIA Drivers" = NVIDIA Drivers[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148"{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}" = Microsoft Visual C++ 2005 Redistributable"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148"{237CD223-1B9D-47E8-A76C-E478B83CCEA2}" = File Uploader"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java 6 Update 21"{26B878A8-5704-3B64-BDBC-4F0EACA38121}" = Google Talk Plugin"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support"{55B6344C-AE4F-4DA8-BF32-D7AE0CB4D2BE}_is1" = theRenamer 6.7"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update"{75B61CF0-B8A8-46E2-8709-C4A79898AC1D}" = Data Lifeguard Diagnostic for Windows"{75CE8AF5-0A5E-4A42-BC67-F83591DA9A7D}" = Sound Blaster X-Fi MB"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable"{8471021C-F529-43DE-84DF-3612E10F58C4}" = Remote Control USB Driver"{87441A59-5E64-4096-A170-14EFE67200C3}" = Picture Control Utility"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1.2"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center"{E6B87DC4-2B3D-4483-ADFF-E483BF718991}" = OpenOffice.org 3.1"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module"Adobe AIR" = Adobe AIR"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin"Advanced Audio FX Engine" = Advanced Audio FX Engine"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.10"AVG9Uninstall" = AVG Free 9.0"CCleaner" = CCleaner"Dell Webcam Central" = Dell Webcam Central"DVDFab 7_is1" = DVDFab 7.0.9.3 (08/08/2010)"EventGhost_is1" = EventGhost 0.3.7.r1462"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)"ObjectDock" = ObjectDock"Rainmeter" = Rainmeter (remove only)"Revo Uninstaller" = Revo Uninstaller 1.85"Torrent Episode Downloader 0.9715" = Torrent Episode Downloader"uTorrent" = Link to post Share on other sites More sharing options...
Elise Posted August 28, 2010 ID:306175 Share Posted August 28, 2010 Looks like there might be a disk error, but to be on the safe side, lets check also the MBR.Please download MBRCheck.exe by a_d_13 from one of the links provided below and save it to your desktop.Link 1Link 2Link 3Double-click on MBRCheck.exe to run it. Vista/Windows 7 users right-click and select Run As Administrator.It will open a black screen with some data on it...please do not fix anything (if it gives you an option).When complete, you should see Done! Press ENTER to exit.... Press Enter on the keyboard.A log named MBRCheck_date_time.txt (i.e. MBRCheck_07.21.10_10.22.51.txt) will be created on the desktop.Copy and paste the contents of that log in your next reply. Link to post Share on other sites More sharing options...
gqsmooth Posted August 29, 2010 Author ID:306263 Share Posted August 29, 2010 I ran the MBR program. The Non-MBR code that it found is just one of my external drives...Not sure if that makes a difference, since I am not sure what an MBR Code/Error is....Here is the log you requested.MBRCheck, version 1.2.3© 2010, ADCommand-line: Windows Version: Windows 7 Home Premium EditionWindows Information: (build 7600), 64-bitBase Board Manufacturer: Dell Inc.BIOS Manufacturer: Dell Inc.System Manufacturer: Dell Inc.System Product Name: Studio 1440Logical Drives Mask: 0x0000003cKernel Drivers (total 197): 0x02C63000 \SystemRoot\system32\ntoskrnl.exe 0x02C1A000 \SystemRoot\system32\hal.dll 0x00BAD000 \SystemRoot\system32\kdcom.dll 0x00C79000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x00CBD000 \SystemRoot\system32\PSHED.dll 0x00CD1000 \SystemRoot\system32\CLFS.SYS 0x00D2F000 \SystemRoot\system32\CI.dll 0x00E62000 \SystemRoot\system32\drivers\Wdf01000.sys 0x00F06000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x00F15000 \SystemRoot\system32\DRIVERS\ACPI.sys 0x00F6C000 \SystemRoot\system32\DRIVERS\WMILIB.SYS 0x00F75000 \SystemRoot\system32\DRIVERS\msisadrv.sys 0x00F7F000 \SystemRoot\system32\DRIVERS\pci.sys 0x00FB2000 \SystemRoot\system32\DRIVERS\vdrvroot.sys 0x00FBF000 \SystemRoot\System32\drivers\partmgr.sys 0x00FD4000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x00FDD000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x00FE9000 \SystemRoot\system32\DRIVERS\volmgr.sys 0x00E00000 \SystemRoot\System32\drivers\volmgrx.sys 0x00C00000 \SystemRoot\System32\drivers\mountmgr.sys 0x00C1A000 \SystemRoot\system32\DRIVERS\atapi.sys 0x00C23000 \SystemRoot\system32\DRIVERS\ataport.SYS 0x01020000 \SystemRoot\system32\DRIVERS\nvstor64.sys 0x0105E000 \SystemRoot\system32\DRIVERS\storport.sys 0x010C0000 \SystemRoot\system32\DRIVERS\amdxata.sys 0x010CB000 \SystemRoot\system32\drivers\fltmgr.sys 0x01117000 \SystemRoot\system32\drivers\fileinfo.sys 0x01234000 \SystemRoot\System32\Drivers\Ntfs.sys 0x0112B000 \SystemRoot\System32\Drivers\msrpc.sys 0x013D7000 \SystemRoot\System32\Drivers\ksecdd.sys 0x01189000 \SystemRoot\System32\Drivers\cng.sys 0x01200000 \SystemRoot\System32\drivers\pcw.sys 0x01211000 \SystemRoot\System32\Drivers\Fs_Rec.sys 0x01472000 \SystemRoot\system32\drivers\ndis.sys 0x01564000 \SystemRoot\system32\drivers\NETIO.SYS 0x015C4000 \SystemRoot\System32\Drivers\ksecpkg.sys 0x01601000 \SystemRoot\System32\drivers\tcpip.sys 0x01400000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x0187D000 \SystemRoot\system32\DRIVERS\volsnap.sys 0x018C9000 \SystemRoot\System32\Drivers\spldr.sys 0x018D1000 \SystemRoot\System32\drivers\rdyboost.sys 0x0190B000 \SystemRoot\System32\Drivers\mup.sys 0x0191D000 \SystemRoot\System32\drivers\hwpolicy.sys 0x01926000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x01960000 \SystemRoot\system32\DRIVERS\disk.sys 0x01976000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS 0x0183D000 \SystemRoot\System32\Drivers\Null.SYS 0x01846000 \SystemRoot\System32\Drivers\Beep.SYS 0x0184D000 \SystemRoot\System32\drivers\vga.sys 0x01813000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x0185B000 \SystemRoot\System32\drivers\watchdog.sys 0x0186B000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x01874000 \SystemRoot\system32\drivers\rdpencdd.sys 0x0144A000 \SystemRoot\system32\drivers\rdprefmp.sys 0x01453000 \SystemRoot\System32\Drivers\Msfs.SYS 0x0145E000 \SystemRoot\System32\Drivers\Npfs.SYS 0x01000000 \SystemRoot\system32\DRIVERS\tdx.sys 0x015EF000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x03C53000 \SystemRoot\System32\Drivers\avgtdia.sys 0x03CA4000 \SystemRoot\System32\DRIVERS\netbt.sys 0x03CE9000 \SystemRoot\system32\drivers\afd.sys 0x03D73000 \SystemRoot\system32\DRIVERS\wfplwf.sys 0x03D7C000 \SystemRoot\system32\DRIVERS\pacer.sys 0x03DA2000 \SystemRoot\system32\DRIVERS\vwififlt.sys 0x03DB8000 \SystemRoot\system32\DRIVERS\netbios.sys 0x03DC7000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x03DE2000 \SystemRoot\system32\DRIVERS\termdd.sys 0x03C00000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x0121B000 \SystemRoot\system32\drivers\nsiproxy.sys 0x01227000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x013F1000 \SystemRoot\System32\drivers\discache.sys 0x00C4D000 \SystemRoot\System32\Drivers\dfsc.sys 0x00DEF000 \SystemRoot\system32\DRIVERS\blbdrive.sys 0x03DF6000 \SystemRoot\System32\Drivers\avgmfx64.sys 0x02C8B000 \SystemRoot\System32\Drivers\avgldx64.sys 0x02CD2000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x02CF8000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x02D0E000 \SystemRoot\system32\DRIVERS\wmiacpi.sys 0x02D17000 \SystemRoot\system32\DRIVERS\CmBatt.sys 0x02D1C000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0x02D3A000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x02D49000 \SystemRoot\system32\DRIVERS\Apfiltr.sys 0x02D87000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x02D96000 \SystemRoot\system32\DRIVERS\nvsmu.sys 0x02DA1000 \SystemRoot\system32\DRIVERS\usbohci.sys 0x02C00000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x02C56000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x02C67000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x0487F000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys 0x05375000 \SystemRoot\system32\DRIVERS\nvBridge.kmd 0x03AF3000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x03A00000 \SystemRoot\System32\drivers\dxgmms1.sys 0x03A46000 \SystemRoot\system32\DRIVERS\Rt64win7.sys 0x040A5000 \SystemRoot\system32\DRIVERS\bcmwl664.sys 0x0434D000 \SystemRoot\system32\DRIVERS\vwifibus.sys 0x0435A000 \SystemRoot\system32\DRIVERS\1394ohci.sys 0x04398000 \SystemRoot\system32\DRIVERS\CompositeBus.sys 0x043A8000 \SystemRoot\system32\DRIVERS\AgileVpn.sys 0x043BE000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x043E2000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x04000000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x0402F000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x0404A000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x0406B000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x04085000 \SystemRoot\System32\Drivers\pcouffin.sys 0x0409A000 \SystemRoot\system32\DRIVERS\swenum.sys 0x03A7F000 \SystemRoot\system32\DRIVERS\ks.sys 0x043EE000 \SystemRoot\system32\DRIVERS\umbus.sys 0x05377000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x03AC2000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x04800000 \SystemRoot\system32\DRIVERS\stwrt64.sys 0x02DAC000 \SystemRoot\system32\DRIVERS\portcls.sys 0x053D1000 \SystemRoot\system32\DRIVERS\drmk.sys 0x0409C000 \SystemRoot\system32\drivers\ksthunk.sys 0x03AD7000 \SystemRoot\system32\drivers\nvhda64v.sys 0x03BE7000 \SystemRoot\System32\Drivers\crashdmp.sys 0x03BF5000 \SystemRoot\System32\Drivers\dump_diskdump.sys 0x019A6000 \SystemRoot\System32\Drivers\dump_nvstor64.sys 0x02DE9000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0x044F3000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x04510000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x000B0000 \SystemRoot\System32\win32k.sys 0x04512000 \SystemRoot\System32\drivers\Dxapi.sys 0x0451E000 \SystemRoot\System32\Drivers\usbvideo.sys 0x0454C000 \SystemRoot\system32\DRIVERS\CtClsFlt.sys 0x00460000 \SystemRoot\System32\TSDDD.dll 0x007C0000 \SystemRoot\System32\cdd.dll 0x04585000 \SystemRoot\system32\drivers\luafv.sys 0x045A8000 \SystemRoot\system32\drivers\WudfPf.sys 0x045C9000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x04400000 \SystemRoot\system32\DRIVERS\nwifi.sys 0x04453000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x04466000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x06A4A000 \SystemRoot\system32\drivers\HTTP.sys 0x06B12000 \SystemRoot\system32\DRIVERS\bowser.sys 0x06B30000 \SystemRoot\System32\drivers\mpsdrv.sys 0x06B48000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x06B75000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x06BC3000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x06E0D000 \SystemRoot\system32\drivers\peauth.sys 0x06EB3000 \SystemRoot\System32\Drivers\secdrv.SYS 0x06EBE000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x06EEB000 \SystemRoot\System32\drivers\tcpipreg.sys 0x06EFD000 \SystemRoot\System32\DRIVERS\srv2.sys 0x06F65000 \SystemRoot\System32\DRIVERS\srv.sys 0x06A00000 \SystemRoot\System32\drivers\ipnat.sys 0x06E00000 \SystemRoot\system32\drivers\BCM42RLY.sys 0x0447E000 \SystemRoot\System32\Drivers\fastfat.SYS 0x06BE6000 \SystemRoot\system32\DRIVERS\monitor.sys 0x06A2F000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x044DE000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x04577000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x045DE000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x06BF4000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x053F3000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x044B4000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x09A49000 \SystemRoot\system32\DRIVERS\udfs.sys 0x778C0000 \Windows\System32\ntdll.dll 0x47860000 \Windows\System32\smss.exe 0xFFBE0000 \Windows\System32\apisetschema.dll 0xFF450000 \Windows\System32\autochk.exe 0xFFAF0000 \Windows\System32\oleaut32.dll 0xFFA50000 \Windows\System32\msvcrt.dll 0xFF7F0000 \Windows\System32\iertutil.dll 0xFF750000 \Windows\System32\clbcatq.dll 0xFE9C0000 \Windows\System32\shell32.dll 0xFE9A0000 \Windows\System32\imagehlp.dll 0xFE950000 \Windows\System32\ws2_32.dll 0xFE8B0000 \Windows\System32\comdlg32.dll 0xFE780000 \Windows\System32\rpcrt4.dll 0xFE6A0000 \Windows\System32\advapi32.dll 0xFE680000 \Windows\System32\sechost.dll 0xFE550000 \Windows\System32\wininet.dll 0x77A90000 \Windows\System32\normaliz.dll 0xFE4E0000 \Windows\System32\gdi32.dll 0xFE4D0000 \Windows\System32\nsi.dll 0xFE4C0000 \Windows\System32\lpk.dll 0xFE340000 \Windows\System32\urlmon.dll 0xFE130000 \Windows\System32\ole32.dll 0x777A0000 \Windows\System32\kernel32.dll 0x776A0000 \Windows\System32\user32.dll 0xFE020000 \Windows\System32\msctf.dll 0xFDFF0000 \Windows\System32\imm32.dll 0xFDF70000 \Windows\System32\difxapi.dll 0xFDD90000 \Windows\System32\setupapi.dll 0xFDD10000 \Windows\System32\shlwapi.dll 0xFDCC0000 \Windows\System32\Wldap32.dll 0x77A80000 \Windows\System32\psapi.dll 0xFDBF0000 \Windows\System32\usp10.dll 0xFDB80000 \Windows\System32\KernelBase.dll 0xFDAE0000 \Windows\System32\comctl32.dll 0xFD970000 \Windows\System32\crypt32.dll 0xFD930000 \Windows\System32\cfgmgr32.dll 0xFD8F0000 \Windows\System32\wintrust.dll 0xFD8D0000 \Windows\System32\devobj.dll 0xFD8C0000 \Windows\System32\msasn1.dll 0x76ED0000 \Windows\SysWOW64\normaliz.dllProcesses (total 78): 0 System Idle Process 4 System 276 C:\Windows\System32\smss.exe 368 csrss.exe 432 C:\Windows\System32\wininit.exe 444 csrss.exe 452 C:\Program Files (x86)\AVG\AVG9\avgchsva.exe 460 C:\Program Files (x86)\AVG\AVG9\avgrsa.exe 520 C:\Windows\System32\services.exe 536 C:\Windows\System32\lsass.exe 548 C:\Windows\System32\lsm.exe 596 C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe 692 C:\Windows\System32\svchost.exe 912 C:\Windows\System32\winlogon.exe 952 C:\Windows\System32\nvvsvc.exe 980 C:\Windows\System32\svchost.exe 296 C:\Windows\System32\svchost.exe 1036 C:\Windows\System32\svchost.exe 1076 C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe 1176 C:\Windows\System32\svchost.exe 1204 C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe 1284 C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe 1480 C:\Windows\System32\svchost.exe 1540 C:\Windows\System32\nvvsvc.exe 1676 C:\Windows\System32\svchost.exe 1840 C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE 1860 C:\Windows\System32\wlanext.exe 1880 C:\Windows\System32\conhost.exe 1888 C:\Program Files\Dell\Dell Wireless WLAN Card\BCMWLTRY.EXE 2000 C:\Windows\System32\spoolsv.exe 1116 C:\Windows\System32\svchost.exe 1568 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 1576 C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe 1752 C:\Program Files (x86)\Bonjour\mDNSResponder.exe 1052 C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2084 C:\Windows\System32\svchost.exe 2124 C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe 2432 C:\Program Files (x86)\AVG\AVG9\avgemc.exe 2488 C:\Program Files (x86)\AVG\AVG9\avgnsa.exe 2876 C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe 3012 C:\Windows\System32\alg.exe 1796 C:\Windows\System32\svchost.exe 3472 C:\Program Files\Windows Media Player\wmpnetwk.exe 3592 WmiPrvSE.exe 3616 C:\Windows\System32\SearchIndexer.exe 612 C:\Windows\System32\taskhost.exe 2280 C:\Windows\System32\dwm.exe 1324 C:\Windows\explorer.exe 1064 C:\Program Files\DellTPad\Apoint.exe 672 C:\Program Files\IDT\WDM\sttray64.exe 1472 C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE 1836 C:\Program Files\Dell\QuickSet\quickset.exe 3116 C:\Windows\System32\rundll32.exe 3404 C:\Program Files\Rainmeter\Rainmeter.exe 3192 C:\Program Files (x86)\Stardock\ObjectDock\ObjectDock.exe 3864 C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe 2072 C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe 3364 C:\Program Files (x86)\AVG\AVG9\avgtray.exe 3956 C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe 3968 C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe 3836 C:\Program Files\iTunes\iTunesHelper.exe 2668 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 3824 C:\Program Files\DellTPad\ApMsgFwd.exe 3776 C:\Program Files\DellTPad\hidfind.exe 3556 C:\Program Files\DellTPad\ApntEx.exe 1132 C:\Windows\System32\conhost.exe 3100 C:\Program Files (x86)\Stardock\ObjectDock\Dock64.exe 4308 C:\Windows\System32\svchost.exe 4468 C:\Program Files\iPod\bin\iPodService.exe 3788 C:\Windows\explorer.exe 3136 C:\Program Files (x86)\Mozilla Firefox\firefox.exe 4860 C:\Windows\System32\taskhost.exe 4128 C:\Windows\System32\SearchProtocolHost.exe 4672 C:\Windows\System32\SearchFilterHost.exe 3860 C:\Windows\System32\dllhost.exe 3856 C:\Windows\System32\audiodg.exe 4456 C:\Users\G\Desktop\MBRCheck.exe 4432 C:\Windows\System32\conhost.exe\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000003`ac000000 (NTFS)\\.\E: --> \\.\PhysicalDrive1 at offset 0x00000000`00007e00 (NTFS)\\.\F: --> \\.\PhysicalDrive2 at offset 0x00000000`00007e00 (NTFS)PhysicalDrive0 Model Number: WDC WD2500BEVT-75ZCT, Rev: 11.0PhysicalDrive1 Model Number: WDMy Book, Rev: 1028PhysicalDrive2 Model Number: WD5000AAV External, Rev: 1.65 Size Device Name MBR Status -------------------------------------------- 232 GB \\.\PhysicalDrive0 RE: Windows 2008 MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 1863 GB \\.\PhysicalDrive1 RE: Unknown MBR code SHA1: D90653CCC05EE39D4D44E1F67C33297D65F3ED4F 465 GB \\.\PhysicalDrive2 RE: Western Digital MBR code detected SHA1: CCCF1B32EE08ECFB66B30883CFF6110F69219FEAFound non-standard or infected MBR.Enter 'Y' and hit ENTER for more options, or 'N' to exit: Options: [1] Dump the MBR of a physical disk to file. [2] Restore the MBR of a physical disk with a standard boot code. [3] Exit.Enter your choice: Done!Once again, thank you. Link to post Share on other sites More sharing options...
Elise Posted August 29, 2010 ID:306553 Share Posted August 29, 2010 That is more likely a disk problem. The event viewer is also seeing it. Please open Computer, right click on your drive (its this one: PhysicalDrive1 Model Number: WDMy Book, Rev: 1028) and select properties.In properties look on the tabs for the error checking option and execute it. Let me know if anything was found/changed.Can you access this drive and what does it contain? Link to post Share on other sites More sharing options...
gqsmooth Posted August 29, 2010 Author ID:306799 Share Posted August 29, 2010 I'm running a scan now. My external drive just contains movies and shows and their associated art. I can access the drive just fine. So it doesn't look like I have any malware running on my system? Link to post Share on other sites More sharing options...
Elise Posted August 30, 2010 ID:306908 Share Posted August 30, 2010 This is what made me think of drive errors.Error - 8/16/2010 8:34:24 PM | Computer Name = Gabe | Source = Disk | ID = 262155Description = The driver detected a controller error on \Device\Harddisk1\DR5.Error - 8/16/2010 9:16:40 PM | Computer Name = Gabe | Source = Disk | ID = 262155Description = The driver detected a controller error on \Device\Harddisk1\DR5.Please let me know if you notice any change in performance after running the scan. Link to post Share on other sites More sharing options...
Maurice Naggar Posted September 12, 2010 ID:312708 Share Posted September 12, 2010 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts