Unable to update MBAM

paulm09 · October 1, 2010

Im having this 12007 update error and cant update the definitions below

are the logs from OTL & rootkit unhooker as requested.

Thank you in advance for any help you can provide

Paul

OTL logfile created on: 9/30/2010 8:26:40 PM - Run 1

OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\Paul Miller (Home1)\My Documents\Downloads

Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 65.00% Memory free

4.00 Gb Paging File | 3.00 Gb Available in Paging File | 81.00% Paging File free

Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 71.18 Gb Total Space | 22.28 Gb Free Space | 31.30% Space Free | Partition Type: NTFS

Drive D: | 139.80 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: PMILLERHOME1

Current User Name: Paul Miller (Home1)

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/09/30 20:23:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\Downloads\OTL.exe

PRC - [2010/09/26 21:49:54 | 000,115,056 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\SymcPCCULaunchSvc.exe

PRC - [2010/09/14 18:59:44 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe

PRC - [2010/09/05 01:09:39 | 003,050,048 | ---- | M] (Webroot Software, Inc. ) -- C:\Program Files\Webroot\Security\Current\Framework\WRConsumerService.exe

PRC - [2010/09/05 01:09:35 | 001,277,672 | ---- | M] (Webroot Software, Inc. ) -- C:\Program Files\Webroot\Security\Current\Framework\WRTray.exe

PRC - [2010/08/25 16:56:58 | 003,867,096 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) -- C:\Program Files\Webroot\Security\Current\Plugins\AntiMalware\AEI.exe

PRC - [2010/08/25 16:56:48 | 000,157,536 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) -- C:\Program Files\Webroot\Security\Current\Plugins\AntiMalware\SSU.exe

PRC - [2010/08/13 12:58:56 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

PRC - [2010/06/24 22:33:08 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

PRC - [2010/04/29 15:39:32 | 001,090,952 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware2\mbam.exe

PRC - [2010/02/25 20:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccsvchst.exe

PRC - [2009/08/24 18:49:41 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe

PRC - [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2007/12/17 04:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE

PRC - [2007/08/30 10:50:42 | 000,205,480 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

PRC - [2007/03/15 14:48:26 | 000,535,807 | ---- | M] (Aladdin Knowledge Systems Ltd.) -- C:\WINDOWS\system32\hasplms.exe

PRC - [2007/01/11 04:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE

PRC - [2006/12/19 18:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe

PRC - [2005/03/22 17:20:44 | 000,339,968 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\stsystra.exe

========== Modules (SafeList) ==========

MOD - [2010/09/30 20:23:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\Downloads\OTL.exe

MOD - [2010/05/14 01:35:01 | 000,415,088 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Security Suite\Engine\4.2.0.12\asoehook.dll

MOD - [2009/07/12 04:02:02 | 000,653,120 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Norton Security Suite\Engine\4.2.0.12\microsoft.vc90.crt\msvcr90.dll

MOD - [2009/07/12 04:02:00 | 000,569,664 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Norton Security Suite\Engine\4.2.0.12\microsoft.vc90.crt\msvcp90.dll

MOD - [2008/04/13 20:10:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx

========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)

SRV - [2010/09/26 21:49:54 | 000,115,056 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\SymcPCCULaunchSvc.exe -- (Norton PC Checkup Application Launcher)

SRV - [2010/09/05 01:09:39 | 003,050,048 | ---- | M] (Webroot Software, Inc. ) [Auto | Running] -- C:\Program Files\Webroot\Security\Current\Framework\WRConsumerService.exe -- (WRConsumerService)

SRV - [2010/08/25 16:56:58 | 003,867,096 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Auto | Running] -- C:\Program Files\Webroot\Security\current\plugins\antimalware\AEI.exe -- (WebrootSpySweeperService)

SRV - [2010/08/13 12:58:56 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2010/02/25 20:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) [unknown | Running] -- C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccSvcHst.exe -- (N360)

SRV - [2009/08/24 18:49:41 | 000,126,392 | R--- | M] (Symantec Corporation) [unknown | Running] -- C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe -- (PCCUJobMgr)

SRV - [2007/12/17 04:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE -- (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)

SRV - [2007/03/15 14:48:26 | 000,535,807 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Auto | Running] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms)

SRV - [2007/01/11 04:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)

SRV - [2006/12/19 18:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\System32\DRIVERS\OMCI.SYS -- (OMCI)

DRV - [2010/09/28 21:50:40 | 001,371,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100930.023\NAVEX15.SYS -- (NAVEX15)

DRV - [2010/09/28 21:50:40 | 000,086,064 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100930.023\NAVENG.SYS -- (NAVENG)

DRV - [2010/08/31 18:57:04 | 000,692,272 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20100901.003\BHDrvx86.sys -- (BHDrvx86)

DRV - [2010/06/17 14:49:10 | 000,182,056 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ssidrv.sys -- (ssidrv)

DRV - [2010/06/17 14:49:10 | 000,045,072 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\ssfmonm.sys -- (ssfmonm)

DRV - [2010/06/17 14:49:10 | 000,024,496 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sshrmd.sys -- (sshrmd)

DRV - [2010/06/10 01:13:13 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2010/06/09 01:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2010/06/09 01:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2010/05/28 15:33:19 | 000,331,640 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20100929.001\IDSXpx86.sys -- (IDSxpx86)

DRV - [2010/05/06 00:01:59 | 000,361,904 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS -- (SYMTDI)

DRV - [2010/04/29 01:03:51 | 000,116,784 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS -- (SymIRON)

DRV - [2010/04/21 23:02:20 | 000,173,104 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMEFA.SYS -- (SymEFA)

DRV - [2010/04/21 22:29:50 | 000,325,680 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS -- (SRTSP)

DRV - [2010/04/21 22:29:50 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)

DRV - [2010/02/25 20:22:57 | 000,501,888 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys -- (ccHP)

DRV - [2009/10/14 23:50:05 | 000,328,752 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMDS.SYS -- (SymDS)

DRV - [2008/04/13 12:36:05 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)

DRV - [2007/03/12 20:48:56 | 000,351,744 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)

DRV - [2007/03/06 21:39:20 | 000,694,272 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)

DRV - [2005/11/16 15:36:00 | 001,047,816 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1060284298-606747145-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://my.myway.com/

IE - HKU\S-1-5-21-1060284298-606747145-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1060284298-606747145-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0

FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6

FF - prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.73

FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1

FF - prefs.js..network.proxy.no_proxies_on: "*.local"

FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010/06/11 14:13:53 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010/06/10 01:14:03 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/25 01:02:27 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/09/25 01:29:22 | 000,000,000 | ---D | M]

[2010/09/25 01:02:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Mozilla\Extensions

[2010/09/30 10:53:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Mozilla\Firefox\Profiles\erc918fd.default\extensions

[2010/09/26 09:35:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Mozilla\Firefox\Profiles\erc918fd.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010/09/25 02:28:48 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Mozilla\Firefox\Profiles\erc918fd.default\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}

[2010/09/25 02:28:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Mozilla\Firefox\Profiles\erc918fd.default\extensions\personas@christopher.beard

[2010/09/25 01:02:09 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions

[2010/08/24 05:31:30 | 000,773,120 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll

O1 HOSTS File: ([2010/09/29 20:42:13 | 000,415,852 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS

O1 - Hosts: 127.0.0.1 www.007guard.com

O1 - Hosts: 127.0.0.1 007guard.com

O1 - Hosts: 127.0.0.1 008i.com

O1 - Hosts: 127.0.0.1 www.008k.com

O1 - Hosts: 127.0.0.1 008k.com

O1 - Hosts: 127.0.0.1 www.00hq.com

O1 - Hosts: 127.0.0.1 00hq.com

O1 - Hosts: 127.0.0.1 010402.com

O1 - Hosts: 127.0.0.1 www.032439.com

O1 - Hosts: 127.0.0.1 032439.com

O1 - Hosts: 127.0.0.1 www.0scan.com

O1 - Hosts: 127.0.0.1 0scan.com

O1 - Hosts: 127.0.0.1 1000gratisproben.com

O1 - Hosts: 127.0.0.1 www.1000gratisproben.com

O1 - Hosts: 127.0.0.1 1001namen.com

O1 - Hosts: 127.0.0.1 www.1001namen.com

O1 - Hosts: 127.0.0.1 100888290cs.com

O1 - Hosts: 127.0.0.1 www.100888290cs.com

O1 - Hosts: 127.0.0.1 www.100sexlinks.com

O1 - Hosts: 127.0.0.1 100sexlinks.com

O1 - Hosts: 127.0.0.1 10sek.com

O1 - Hosts: 127.0.0.1 www.10sek.com

O1 - Hosts: 127.0.0.1 www.1-2005-search.com

O1 - Hosts: 127.0.0.1 1-2005-search.com

O1 - Hosts: 127.0.0.1 123fporn.info

O1 - Hosts: 14356 more lines...

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.

O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.8.11.dll (BitComet)

O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)

O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ipsbho.dll (Symantec Corporation)

O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5627.1104\swg.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)

O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)

O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)

O3 - HKU\S-1-5-21-1060284298-606747145-839522115-1004\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKU\S-1-5-21-1060284298-606747145-839522115-1004\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)

O4 - HKLM..\Run: [HitmanPro35] C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe (SurfRight B.V.)

O4 - HKLM..\Run: [HotSync] C:\Program Files\PalmSource\Desktop\HotSync.exe File not found

O4 - HKLM..\Run: [sigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)

O4 - HKLM..\Run: [WebrootTrayApp] C:\Program Files\Webroot\Security\Current\Framework\WRTray.exe (Webroot Software, Inc. )

O4 - HKU\S-1-5-21-1060284298-606747145-839522115-1004..\Run: [bitComet] C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)

O4 - HKU\S-1-5-21-1060284298-606747145-839522115-1004..\Run: [EPSON NX510 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFIA.EXE (SEIKO EPSON CORPORATION)

O4 - HKU\S-1-5-21-1060284298-606747145-839522115-1004..\Run: [Epson Stylus NX510(Network)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFIA.EXE (SEIKO EPSON CORPORATION)

O4 - HKU\S-1-5-21-1060284298-606747145-839522115-1004..\Run: [iSUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)

O4 - HKU\S-1-5-21-1060284298-606747145-839522115-1004..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe File not found

O4 - HKU\S-1-5-21-1060284298-606747145-839522115-1004..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware2\mbamgui.exe (Malwarebytes Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-1060284298-606747145-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: &D&ownload &with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)

O8 - Extra context menu item: &D&ownload all with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)

O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2D06158FAC79A790.dll (Google Inc.)

O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)

O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.8.11.dll (BitComet)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.109.67.166 213.109.73.41 1.1.1.1

O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)

O24 - Desktop WallPaper: C:\Documents and Settings\Paul Miller (Home1)\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\Paul Miller (Home1)\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

O30 - LSA: Authentication Packages - (OWS\S) - File not found

O30 - LSA: Security Packages - (em\\ecurity Packages settings..) - File not found

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010/06/09 18:02:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{64ad47bd-7527-11df-b69b-001372da0a2d}\Shell\AutoRun\command - "" = F:\setup.exe -- File not found

O33 - MountPoints2\{cbfd4be8-7ff1-11df-b6b1-001372da0a2d}\Shell\AutoRun\command - "" = G:\StartPortableApps.exe -- File not found

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/09/30 20:18:22 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2010/09/30 20:18:18 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2010/09/30 20:18:15 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware2

[2010/09/25 16:43:22 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll

[2010/09/25 16:43:22 | 000,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui

[2010/09/25 02:17:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1

[2010/09/25 01:41:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\McAfee

[2010/09/25 01:15:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\McAfee

[2010/09/25 01:14:00 | 000,000,000 | ---D | C] -- C:\Program Files\Times Reader

[2010/09/25 01:07:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight

[2010/09/25 01:02:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Mozilla

[2010/09/24 01:52:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Desktop\Paul Miller

[2010/09/24 01:48:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Desktop\New Mexico

[2010/09/22 22:46:28 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8

[2010/09/22 12:47:14 | 000,000,000 | ---D | C] -- C:\N360_BACKUP

[2010/09/19 02:40:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Yahoo!

[2010/09/19 02:39:52 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!

[2010/09/18 12:39:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\RegCure

[2010/09/18 12:07:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Registry Mechanic

[2010/09/18 12:03:09 | 000,000,000 | ---D | C] -- C:\Program Files\Registry Mechanic

[2010/09/10 22:41:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Local Settings\Application Data\Astar Games

[2010/09/10 22:40:09 | 000,000,000 | ---D | C] -- C:\Program Files\Paradise Beach

[2010/09/10 22:34:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple

[2010/09/09 08:14:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Uniblue

[2010/09/09 08:14:21 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue

[2010/09/06 19:57:49 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe

[2010/09/06 19:35:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Hitman Pro

[2010/09/06 19:35:05 | 000,000,000 | ---D | C] -- C:\Program Files\Hitman Pro 3.5

[2010/09/06 19:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\boost_interprocess

[2010/09/06 19:04:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\CometPlayer

[2010/09/06 19:04:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\TigerPlayer

[2010/09/06 18:59:04 | 000,000,000 | ---D | C] -- C:\Program Files\MpcStar

[2010/09/06 18:57:59 | 000,000,000 | ---D | C] -- C:\Downloads

[2010/09/06 18:57:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\BitComet

[2010/09/06 18:57:11 | 000,000,000 | ---D | C] -- C:\Program Files\BitComet

[2010/09/05 17:49:21 | 000,000,000 | ---D | C] -- C:\Program Files\Safari

[2010/09/05 17:46:06 | 000,000,000 | ---D | C] -- C:\Program Files\iPod

[2010/09/05 17:45:52 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes

[2010/09/05 17:39:39 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime

[2010/09/04 21:07:13 | 000,000,000 | ---D | C] -- C:\CCP_V600

[2010/09/04 20:47:53 | 000,000,000 | ---D | C] -- C:\CcpDNCList

[2010/09/04 20:46:39 | 000,110,592 | ---- | C] (Software Source) -- C:\WINDOWS\System32\VBIS5032.dll

[2010/09/04 20:46:39 | 000,000,000 | ---D | C] -- C:\Program Files\Import Utility

[2010/09/04 20:46:37 | 000,200,704 | ---- | C] (EllTech Development, Inc.) -- C:\WINDOWS\System32\CP5DLL32.DLL

[2010/09/04 20:46:37 | 000,134,144 | ---- | C] (Desaware) -- C:\WINDOWS\System32\dwspy32.dll

[2010/09/04 20:46:34 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSRDO20.DLL

[2010/09/04 20:46:33 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdocurs.dll

[2010/09/04 20:46:32 | 000,152,576 | ---- | C] (VideoSoft) -- C:\WINDOWS\System32\Vsocx32.ocx

[2010/09/04 20:46:31 | 000,464,544 | ---- | C] (VideoSoft) -- C:\WINDOWS\System32\Vsflex7.ocx

[2010/09/04 20:46:31 | 000,419,240 | ---- | C] (VideoSoft) -- C:\WINDOWS\System32\vsflex7L.ocx

[2010/09/04 20:46:30 | 000,209,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TABCTL32.OCX

[2010/09/04 20:46:29 | 000,311,296 | ---- | C] (Pepperwhite) -- C:\WINDOWS\System32\Pwstrv2.ocx

[2010/09/04 20:46:29 | 000,166,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMASK32.OCX

[2010/09/04 20:46:28 | 000,103,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMM32.OCX

[2010/09/04 20:46:27 | 000,073,728 | ---- | C] (Haines and Company) -- C:\WINDOWS\System32\HCF.dll

[2010/09/04 20:46:26 | 000,557,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DAO360.DLL

[2010/09/04 20:46:26 | 000,040,960 | ---- | C] (Haines & Company, Inc.) -- C:\WINDOWS\System32\Container.ocx

[2010/09/04 20:46:25 | 000,140,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMDLG32.OCX

[2010/09/04 20:46:24 | 001,678,336 | ---- | C] (Data Dynamics) -- C:\WINDOWS\System32\actrpt2.dll

[2010/09/04 20:46:20 | 000,089,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VB5DB.DLL

[2010/09/04 20:46:13 | 000,000,000 | ---D | C] -- C:\Program Files\Stewart

[2010/09/01 13:47:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paul Miller (Home1)\Desktop\Eagle View Proposals

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/09/30 20:29:14 | 000,000,450 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{FEB3F8C9-EDA6-4458-8715-B8DE99BD5C03}.job

[2010/09/30 20:18:29 | 000,000,701 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2010/09/30 20:04:00 | 000,000,912 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2010/09/30 01:37:47 | 000,000,908 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2010/09/30 01:37:25 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2010/09/30 01:37:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010/09/30 01:37:06 | 3210,891,264 | -HS- | M] () -- C:\hiberfil.sys

[2010/09/30 01:15:44 | 011,534,336 | -H-- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\NTUSER.DAT

[2010/09/30 01:15:41 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\ntuser.ini

[2010/09/29 20:56:37 | 000,016,968 | ---- | M] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys

[2010/09/29 11:23:55 | 000,013,543 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\Vivaldi - Attic.docx

[2010/09/26 10:31:38 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\Desktop\&Help and Support.lnk

[2010/09/25 18:10:30 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk

[2010/09/25 17:58:27 | 000,072,008 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

[2010/09/25 17:57:05 | 000,273,376 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2010/09/25 17:43:01 | 000,000,748 | ---- | M] () -- C:\WINDOWS\win.ini

[2010/09/25 01:14:00 | 000,000,670 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Times Reader.lnk

[2010/09/25 01:02:13 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

[2010/09/25 01:02:13 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk

[2010/09/24 22:34:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[2010/09/22 23:15:45 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2010/09/22 23:14:02 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010/09/22 22:55:17 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2010/09/11 10:36:28 | 000,029,184 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\Desktop\Eagle View Generic Contract.doc

[2010/09/10 22:36:12 | 000,001,854 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk

[2010/09/09 00:05:29 | 000,081,422 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\img_653.jpg

[2010/09/09 00:03:04 | 000,117,240 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\img_784.jpg

[2010/09/09 00:03:03 | 000,084,319 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\img_795.jpg

[2010/09/08 23:38:01 | 000,014,606 | ---- | M] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\The Hunger Games.docx

[2010/09/06 19:57:49 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe

[2010/09/05 20:27:29 | 000,057,588 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/09/30 20:18:29 | 000,000,701 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2010/09/29 11:23:55 | 000,013,543 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\Vivaldi - Attic.docx

[2010/09/26 10:31:38 | 000,000,104 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\Desktop\&Help and Support.lnk

[2010/09/25 01:14:00 | 000,000,670 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Times Reader.lnk

[2010/09/25 01:02:13 | 000,001,620 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

[2010/09/25 01:02:12 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk

[2010/09/11 10:36:27 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\Desktop\Eagle View Generic Contract.doc

[2010/09/09 00:06:44 | 000,081,422 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\img_653.jpg

[2010/09/09 00:05:18 | 000,084,319 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\img_795.jpg

[2010/09/09 00:04:15 | 000,117,240 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\img_784.jpg

[2010/09/08 23:38:01 | 000,014,606 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\My Documents\The Hunger Games.docx

[2010/09/06 19:35:39 | 000,016,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys

[2010/09/06 19:14:11 | 000,497,664 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.acm

[2010/09/05 20:27:29 | 000,057,588 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat

[2010/09/05 17:49:51 | 000,001,854 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk

[2010/09/04 20:46:39 | 000,051,264 | ---- | C] () -- C:\WINDOWS\System32\VBIS23MU.DLL

[2010/09/04 20:46:37 | 000,028,113 | ---- | C] () -- C:\WINDOWS\System32\OLE2.REG

[2010/09/04 20:46:34 | 000,037,062 | ---- | C] () -- C:\WINDOWS\System32\odbcinst.hlp

[2010/09/04 20:46:34 | 000,000,324 | ---- | C] () -- C:\WINDOWS\System32\odbcinst.cnt

[2010/08/23 11:53:48 | 001,133,264 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat

[2010/08/18 22:49:48 | 000,030,424 | ---- | C] () -- C:\WINDOWS\System32\wrLZMA.dll

[2010/08/17 01:15:34 | 000,000,924 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Rim.Desktop.Exception.log

[2010/08/10 21:30:53 | 000,001,518 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\Application Data\Rim.Desktop.HttpServerSetup.log

[2010/06/18 23:56:17 | 000,008,192 | ---- | C] () -- C:\Documents and Settings\Paul Miller (Home1)\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010/06/11 18:00:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\EEventManager.INI

[2010/06/11 15:02:44 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini

========== Alternate Data Streams ==========

@Alternate Data Stream - 228 bytes -> C:\Documents and Settings\All Users\Application Data\Temp:9AE67195

@Alternate Data Stream - 218 bytes -> C:\Documents and Settings\All Users\Application Data\Temp:12EA4DC9

@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\Temp:ECF54A0E

@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\Temp:D1B5B4F1

< End of report >