ninael Posted February 28, 2011 ID:394317 Share Posted February 28, 2011 Hi, sorry if this is the wrong forum, I'm just a bit confused by the log I'm getting from a quick scan.The scan finds two threats; TrojanFakeAlert, and Adware.Softomate, and when I try to delete them, it says it failed to remove, and that I need to restart. So I did, I scanned again, and the same two threats come up. Here is the log I keep gettingMalwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 5376Windows 6.0.6000Internet Explorer 7.0.6000.1689028/02/2011 10:18:33mbam-log-2011-02-28 (10-18-33).txtScan type: Quick scanObjects scanned: 144202Time elapsed: 10 minute(s), 18 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 1Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Delete on reboot.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:c:\programdata\ygguuiaahy.dll (Trojan.FakeAlert.Gen) -> Quarantined and deleted successfully.Nothing seems to be noticeably wrong with my computer at the moment, I just wondered if anyone could shed any light on what I should do.Thanks for any help! Link to post Share on other sites More sharing options...
sjpritch25 Posted March 1, 2011 ID:394670 Share Posted March 1, 2011 Download OTL.exe to your desktop.Double-Click on OTL to run it.When the window appears, underneath Output at the top change it to Standard Output.Under the Standard Registry box change it to All.Under the Extra Registry box change it to All.Under Custom scan's and fixes section paste in the below in boldnetsvcs%SYSTEMDRIVE%\*.*%systemroot%\*. /mp /sCREATERESTOREPOINT%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfiles%systemroot%\System32\config\*.sav%systemroot%\system32\drivers\*.sys /90Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long. When the scan completes, it will open two notepad windows. OTL.txt and Extras.txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. Link to post Share on other sites More sharing options...
ninael Posted March 1, 2011 Author ID:394977 Share Posted March 1, 2011 OTL logfile created on: 01/03/2011 19:59:34 - Run 1OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\Fetherston\DownloadsWindows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstationInternet Explorer (Version = 7.0.6000.16890)Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 46.00% Memory free4.00 Gb Paging File | 3.00 Gb Available in Paging File | 73.00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data]%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program FilesDrive C: | 227.92 Gb Total Space | 18.35 Gb Free Space | 8.05% Space Free | Partition Type: NTFSDrive D: | 4.97 Gb Total Space | 0.59 Gb Free Space | 11.88% Space Free | Partition Type: NTFSComputer Name: ANNE-PC | User Name: anne | Logged in as Administrator.Boot Mode: Normal | Scan Mode: Current userCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days========== Processes (SafeList) ==========PRC - [2011/03/01 19:58:31 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Fetherston\Downloads\OTL.exePRC - [2011/02/28 14:19:06 | 000,910,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exePRC - [2010/10/27 20:21:54 | 001,155,072 | ---- | M] (Last.fm) -- C:\Program Files\Last.fm\LastFM.exePRC - [2010/01/18 17:27:42 | 000,139,944 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\ezprint.exePRC - [2010/01/18 17:27:40 | 000,770,728 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\lxeamon.exePRC - [2010/01/07 21:08:22 | 000,598,696 | ---- | M] ( ) -- C:\Windows\System32\lxeacoms.exePRC - [2010/01/07 21:08:16 | 000,098,984 | ---- | M] (Lexmark International, Inc.) -- C:\Windows\System32\spool\drivers\w32x86\3\lxeaserv.exePRC - [2009/12/09 19:58:40 | 000,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Users\Fetherston\Program Files\DNA\btdna.exePRC - [2008/10/29 06:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exePRC - [2008/03/10 21:22:30 | 001,251,720 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exePRC - [2007/09/12 18:27:24 | 002,999,664 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXEPRC - [2007/09/12 18:27:24 | 000,554,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exePRC - [2007/04/19 18:11:16 | 000,151,552 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exePRC - [2007/04/19 18:10:42 | 000,081,920 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exePRC - [2007/01/10 05:59:52 | 000,115,816 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exePRC - [2007/01/10 05:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exePRC - [2007/01/05 08:19:28 | 000,047,712 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exePRC - [2006/11/09 10:57:52 | 003,784,704 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exePRC - [2006/09/28 13:42:24 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exePRC - [2006/09/03 18:32:28 | 000,208,896 | ---- | M] () -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe========== Modules (SafeList) ==========MOD - [2011/03/01 19:58:31 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Fetherston\Downloads\OTL.exeMOD - [2006/11/02 09:38:57 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll========== Win32 Services (SafeList) ==========SRV - [2010/01/07 21:08:22 | 000,598,696 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxeacoms.exe -- (lxea_device)SRV - [2010/01/07 21:08:16 | 000,098,984 | ---- | M] () [Auto | Running] -- C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxeaserv.exe -- (lxeaCATSCustConnectService)SRV - [2008/11/17 10:51:58 | 001,128,944 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxMediaDB11.exe -- (RoxMediaDB11)SRV - [2008/03/10 21:22:30 | 001,251,720 | ---- | M] () [On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)SRV - [2008/01/29 17:38:31 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)SRV - [2007/09/12 18:27:24 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Running] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)SRV - [2007/09/12 18:27:24 | 000,554,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)SRV - [2007/05/15 14:14:20 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)SRV - [2007/04/19 18:10:42 | 000,081,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel®SRV - [2007/01/14 07:11:06 | 000,080,504 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Norton Internet Security\isPwdSvc.exe -- (ISPwdSvc)SRV - [2007/01/13 03:40:58 | 000,049,248 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost)SRV - [2007/01/10 05:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice Ex)SRV - [2007/01/10 05:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)SRV - [2007/01/10 05:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)SRV - [2007/01/10 05:59:32 | 000,108,648 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)SRV - [2007/01/05 08:19:28 | 000,047,712 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe -- (SymAppCore)SRV - [2006/12/14 02:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)SRV - [2006/12/14 02:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)SRV - [2006/12/14 01:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)SRV - [2006/09/12 00:02:44 | 000,544,256 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe -- (Remote UI Service) Intel®SRV - [2006/09/12 00:01:04 | 000,167,936 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe -- (MCLServiceATL) Intel®SRV - [2006/09/11 23:56:32 | 000,075,264 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe -- (ISSM) Intel®SRV - [2006/09/11 23:56:20 | 000,188,416 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\CCU\AlertService.exe -- (AlertService) Intel®SRV - [2006/09/03 18:32:28 | 000,208,896 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe -- (DQLWinService)SRV - [2006/09/01 07:47:56 | 000,026,624 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe -- (M1 Server) Intel® ViivSRV - [2006/05/10 17:13:52 | 000,029,696 | R--- | M] (Intel® Corporation) [Auto | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe -- (IntelDHSvcConf)========== Driver Services (SafeList) ==========DRV - [2009/12/09 20:19:38 | 000,124,464 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)DRV - [2009/08/03 19:07:12 | 000,038,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMNDISV.SYS -- (SYMNDISV)DRV - [2009/08/03 19:07:10 | 000,188,080 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\SYMTDI.SYS -- (SYMTDI)DRV - [2009/08/03 19:07:10 | 000,145,968 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMFW.SYS -- (SYMFW)DRV - [2009/08/03 19:07:10 | 000,039,856 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMIDS.SYS -- (SYMIDS)DRV - [2009/08/03 19:07:10 | 000,026,416 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)DRV - [2009/08/03 19:07:10 | 000,012,720 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMDNS.SYS -- (SYMDNS)DRV - [2008/09/12 13:22:54 | 000,540,288 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emBDA.sys -- (USB28xxBGA)DRV - [2008/09/12 13:22:24 | 000,443,520 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emOEM.sys -- (USB28xxOEM)DRV - [2008/02/13 16:18:22 | 000,261,680 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Definitions\SymcData\idsdefs\20080513.001\IDSvix86.sys -- (IDSvix86)DRV - [2007/11/30 23:57:12 | 000,317,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)DRV - [2007/11/30 23:57:12 | 000,279,088 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)DRV - [2007/11/30 23:57:12 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)DRV - [2007/04/14 01:49:32 | 000,418,104 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)DRV - [2006/07/13 18:14:16 | 000,004,608 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.sys -- (TSHWMDTCP)DRV - [2005/12/12 16:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)DRV - [2005/11/10 18:54:56 | 000,402,944 | ---- | M] (Belkin Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BLKWGU.sys -- (BLKWGU(Belkin)) Belkin Wireless G USB Network Adapter(Belkin)========== Standard Registry (All) ==================== Internet Explorer ==========IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=71&bd=Pavilion&pf=desktopIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-onsIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htmIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRiskIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=71&bd=Pavilion&pf=desktopIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htmIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=71&bd=Pavilion&pf=desktopIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0========== FireFox ==========FF - prefs.js..browser.search.defaultthis.engineName: "RecipesBar Customized Web Search"FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2436585&SearchSource=3&q={searchTerms}"FF - prefs.js..browser.search.selectedEngine: "RecipesBar Customized Web Search"FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT2436585&SearchSource=13"FF - prefs.js..extensions.enabledItems: {0545b830-f0aa-4d7e-8820-50a4629a56fe}:4.2FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1FF - prefs.js..extensions.enabledItems: {d70f2de6-51e2-42d4-9077-4ca06cafc836}:2.7.2.0FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.5FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/09/04 15:16:15 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/28 14:19:09 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/28 14:19:09 | 000,000,000 | ---D | M][2008/09/09 08:49:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\anne\AppData\Roaming\Mozilla\Extensions[2008/09/09 08:49:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\anne\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}[2010/12/19 10:44:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\5z7e4qhg.default\extensions[2010/02/07 16:09:24 | 000,000,000 | ---D | M] ("ColorfulTabs") -- C:\Users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\5z7e4qhg.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}[2009/09/13 09:18:14 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\5z7e4qhg.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}[2010/08/19 18:04:11 | 000,000,000 | ---D | M] (RecipesBar Toolbar) -- C:\Users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\5z7e4qhg.default\extensions\{d70f2de6-51e2-42d4-9077-4ca06cafc836}[2010/08/08 15:11:54 | 000,000,923 | ---- | M] () -- C:\Users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\5z7e4qhg.default\searchplugins\conduit.xml[2009/10/03 13:33:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions[2011/02/28 14:19:09 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}[2007/12/05 18:48:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}[2009/03/18 19:13:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}[2011/02/28 14:19:05 | 000,025,048 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll[2011/02/28 14:19:05 | 000,138,712 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll[2007/04/10 16:21:08 | 000,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll[2009/03/18 19:12:03 | 000,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll[2008/09/08 16:19:26 | 000,284,248 | ---- | M] (Musicnotes, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npmusicn.dll[2011/02/28 14:19:06 | 000,066,520 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll[2006/10/26 19:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL[2007/05/10 21:52:34 | 000,095,864 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll[2007/05/31 15:25:20 | 000,144,984 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll[2010/12/30 12:53:17 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll[2010/12/30 12:53:17 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll[2010/12/30 12:53:17 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll[2010/12/30 12:53:17 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll[2010/12/30 12:53:18 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll[2010/12/30 12:53:18 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll[2010/12/30 12:53:18 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll[2007/05/31 15:25:27 | 000,024,576 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll[2007/05/31 15:25:17 | 000,081,920 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll[2011/02/28 14:19:07 | 000,001,538 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml[2011/02/28 14:19:07 | 000,002,193 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\answers.xml[2011/02/28 14:19:07 | 000,000,947 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml[2011/02/28 14:19:07 | 000,001,534 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\creativecommons.xml[2011/02/28 14:19:07 | 000,000,769 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml[2011/02/28 14:19:07 | 000,002,371 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml[2011/02/28 14:19:07 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia.xml[2011/02/28 14:19:07 | 000,000,831 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xmlO1 HOSTS File: ([2006/09/18 21:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hostsO1 - Hosts: 127.0.0.1 localhostO1 - Hosts: ::1 localhostO2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)O2 - BHO: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBHO.dll (Symantec Corporation)O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)O2 - BHO: (Lexmark Printable Web) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)O3 - HKLM\..\Toolbar: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll (Symantec Corporation)O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Toolbar) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)O4 - HKLM..\Run: [] File not foundO4 - HKLM..\Run: [Adobe Photo Downloader] File not foundO4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)O4 - HKLM..\Run: [CCUTRAYICON] File not foundO4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark S300-S400 Series\ezprint.exe ()O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)O4 - HKLM..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)O4 - HKLM..\Run: [igfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)O4 - HKLM..\Run: [KBD] C:\hp\KBD\kbd.exe (Hewlett-Packard Company)O4 - HKLM..\Run: [lxeamon.exe] C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe ()O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)O4 - HKLM..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)O4 - HKLM..\Run: [symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)O4 - HKCU..\Run: [ehTray.exe] C:\Windows\ehome\ehtray.exe (Microsoft Corporation)O4 - HKCU..\Run: [EPSON Stylus DX6000 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE (SEIKO EPSON CORPORATION)O4 - HKCU..\Run: [EPSON Stylus DX6000 Series (Copy 2)] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE (SEIKO EPSON CORPORATION)O4 - HKCU..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)O4 - HKCU..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)O4 - HKLM..\RunOnce: [*WerKernelReporting] C:\Windows\System32\WerFault.exe (Microsoft Corporation)O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)O4 - Startup: C:\Users\anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O13 - gopher Prefix: missingO16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\Windows\System32\shell32.dll (Microsoft Corporation)O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\Windows\System32\sysdm.cpl (Microsoft Corporation)O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll (Microsoft Corporation)O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\Windows\System32\browseui.dll (Microsoft Corporation)O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img35.jpgO24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img35.jpgO29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)O31 - SafeBoot: AlternateShell - cmd.exeO32 - HKLM CDRom: AutoRun - 1O32 - AutoRun File - [2006/09/18 21:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]O34 - HKLM BootExecute: (autocheck autochk *) - File not foundO35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37 - HKLM\...com [@ = comfile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %*NetSvcs: FastUserSwitchingCompatibility - File not foundNetSvcs: Ias - File not foundNetSvcs: Nla - File not foundNetSvcs: Ntmssvc - File not foundNetSvcs: NWCWorkstation - File not foundNetSvcs: Nwsapagent - File not foundNetSvcs: SRService - File not foundNetSvcs: WmdmPmSp - File not foundNetSvcs: LogonHours - File not foundNetSvcs: PCAudit - File not foundNetSvcs: helpsvc - File not foundNetSvcs: uploadmgr - File not foundCREATERESTOREPOINTRestore point Set: OTL Restore Point========== Files/Folders - Created Within 30 Days ==========[2011/02/26 19:19:10 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva[2011/02/26 16:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\BSD[2011/02/26 16:47:08 | 002,219,008 | ---- | C] (Bootstrap Development, LLC.) -- C:\Windows\bsdsetup.dll[2011/02/26 14:40:07 | 000,000,000 | ---D | C] -- C:\Users\anne\dwhelper[2011/02/26 14:39:58 | 000,000,000 | ---D | C] -- C:\Users\anne\.thumbnails[2011/02/26 14:39:58 | 000,000,000 | ---D | C] -- C:\Users\anne\.gimp-2.6[2011/02/26 14:39:58 | 000,000,000 | ---D | C] -- C:\Users\anne\.gegl-0.0[2011/02/26 14:39:18 | 015,769,744 | ---- | C] ( ) -- C:\Users\anne\gimp-2.6.3-i686-setup.exe[2011/02/26 14:07:11 | 000,000,000 | ---D | C] -- C:\ProgramData\iKlIjIi06300[2011/02/03 17:15:14 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour[2011/02/03 17:10:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes[2011/02/01 07:07:58 | 000,000,000 | -HSD | C] -- C:\Config.Msi[2010/12/21 19:28:43 | 000,459,264 | ---- | C] (MediaPlayer software) -- C:\ProgramData\Ygguuiaahy.dll[2010/08/18 16:49:39 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\lxeacoin.dll[2010/08/18 16:45:41 | 001,048,576 | ---- | C] ( ) -- C:\Windows\System32\lxeaserv.dll[2010/08/18 16:45:41 | 000,847,872 | ---- | C] ( ) -- C:\Windows\System32\lxeausb1.dll[2010/08/18 16:45:41 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxeapmui.dll[2010/08/18 16:45:41 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxeainpa.dll[2010/08/18 16:45:41 | 000,356,352 | ---- | C] ( ) -- C:\Windows\System32\LXEAhcp.dll[2010/08/18 16:45:41 | 000,344,064 | ---- | C] ( ) -- C:\Windows\System32\lxeaiesc.dll[2010/08/18 16:45:40 | 000,688,128 | ---- | C] ( ) -- C:\Windows\System32\lxeahbn3.dll[2010/08/18 16:45:40 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxealmpm.dll[2010/08/18 16:45:40 | 000,324,264 | ---- | C] ( ) -- C:\Windows\System32\lxeaih.exe[2010/08/18 16:45:39 | 000,802,816 | ---- | C] ( ) -- C:\Windows\System32\lxeacomc.dll[2010/08/18 16:45:39 | 000,598,696 | ---- | C] ( ) -- C:\Windows\System32\lxeacoms.exe[2010/08/18 16:45:39 | 000,373,416 | ---- | C] ( ) -- C:\Windows\System32\lxeacfg.exe[2010/08/18 16:45:39 | 000,372,736 | ---- | C] ( ) -- C:\Windows\System32\lxeacomm.dll[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ][3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]========== Files - Modified Within 30 Days ==========[2011/03/01 20:05:00 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{B3AD529D-B780-46F2-AE29-16336EA94E20}.job[2011/03/01 20:05:00 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{2D168A37-ACDE-4C24-A460-22DBD8BDF236}.job[2011/03/01 19:58:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job[2011/03/01 19:49:55 | 000,000,880 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job[2011/03/01 19:49:53 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0[2011/03/01 19:49:53 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0[2011/03/01 19:49:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat[2011/02/28 22:52:33 | 000,622,906 | ---- | M] () -- C:\Windows\System32\perfh009.dat[2011/02/28 22:52:33 | 000,108,122 | ---- | M] () -- C:\Windows\System32\perfc009.dat[2011/02/28 20:00:00 | 000,000,544 | ---- | M] () -- C:\Windows\tasks\Norton Internet Security - Run Full System Scan - anne.job[2011/02/26 19:19:11 | 000,001,636 | ---- | M] () -- C:\Users\Public\Desktop\Recuva.lnk[2011/02/03 17:31:14 | 000,001,666 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ][3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]========== Files Created - No Company Name ==========[2011/02/26 19:19:11 | 000,001,636 | ---- | C] () -- C:\Users\Public\Desktop\Recuva.lnk[2011/02/26 14:40:07 | 000,002,399 | ---- | C] () -- C:\Users\anne\17-lisbeth_scott-where.mp3[2011/02/26 14:39:53 | 019,612,057 | ---- | C] () -- C:\Users\anne\save-video18.mp4[2011/02/26 14:39:52 | 008,826,396 | ---- | C] () -- C:\Users\anne\save-video12.mp4[2011/02/26 14:39:48 | 014,606,576 | ---- | C] () -- C:\Users\anne\save-video6.mp4[2011/02/26 14:39:45 | 013,520,229 | ---- | C] () -- C:\Users\anne\save-video5.mp4[2011/02/26 14:39:40 | 015,926,672 | ---- | C] () -- C:\Users\anne\save-video2.mp4[2011/02/26 14:39:39 | 004,565,451 | ---- | C] () -- C:\Users\anne\save-video1.mp4[2011/02/26 14:39:37 | 008,298,618 | ---- | C] () -- C:\Users\anne\save-video.mp4[2011/02/26 14:39:26 | 017,858,792 | ---- | C] () -- C:\Users\anne\save-4.mp4[2011/02/26 14:39:21 | 012,451,486 | ---- | C] () -- C:\Users\anne\hayleysandersonsomethingintheair.mp4[2011/02/26 14:39:17 | 007,157,514 | ---- | C] () -- C:\Users\anne\comeasyouare.mp4[2011/02/03 17:18:09 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk[2010/12/22 14:00:48 | 000,000,216 | ---- | C] () -- C:\ProgramData\dfrg[2010/12/22 14:00:48 | 000,000,160 | ---- | C] () -- C:\ProgramData\dfrgr[2010/12/22 14:00:45 | 000,000,336 | ---- | C] () -- C:\ProgramData\gLR2hvKLqS[2010/08/18 16:49:47 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxeavs.dll[2010/08/18 16:49:21 | 000,086,016 | ---- | C] () -- C:\Windows\System32\lxeagcfg.dll[2010/08/18 16:49:19 | 000,110,592 | ---- | C] () -- C:\Windows\System32\lxeacuir.dll[2010/08/18 16:49:18 | 000,294,912 | ---- | C] () -- C:\Windows\System32\lxeacui.dll[2010/08/18 16:45:56 | 000,000,044 | -H-- | C] () -- C:\Windows\System32\lxearwrd.ini[2010/08/18 16:45:41 | 000,331,776 | ---- | C] () -- C:\Windows\System32\LXEAinst.dll[2010/08/18 16:45:40 | 000,323,584 | ---- | C] () -- C:\Windows\System32\lxeains.dll[2010/08/18 16:45:40 | 000,262,144 | ---- | C] () -- C:\Windows\System32\lxeainsb.dll[2010/08/18 16:45:40 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxeagrd.dll[2010/08/18 16:45:40 | 000,106,496 | ---- | C] () -- C:\Windows\System32\lxeainsr.dll[2010/08/18 16:45:40 | 000,057,344 | ---- | C] () -- C:\Windows\System32\lxeajswr.dll[2010/08/18 16:45:39 | 000,253,952 | ---- | C] () -- C:\Windows\System32\lxeacu.dll[2010/08/18 16:45:39 | 000,090,112 | ---- | C] () -- C:\Windows\System32\lxeacub.dll[2010/08/18 16:45:39 | 000,036,864 | ---- | C] () -- C:\Windows\System32\lxeacur.dll[2010/08/18 16:45:05 | 000,023,552 | ---- | C] () -- C:\Windows\System32\LXEAsmr.dll[2010/08/18 16:45:04 | 000,299,008 | ---- | C] () -- C:\Windows\System32\LXEAsm.dll[2010/06/13 09:03:49 | 000,000,127 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc[2009/12/27 20:11:34 | 002,255,360 | ---- | C] () -- C:\Windows\System32\libavcodec.dll[2009/12/27 20:11:34 | 000,395,776 | ---- | C] () -- C:\Windows\System32\libmplayer.dll[2009/12/27 20:11:34 | 000,262,144 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll[2009/12/27 20:11:34 | 000,112,640 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll[2009/06/13 17:49:28 | 000,303,104 | ---- | C] () -- C:\Windows\emunist.exe[2009/06/13 17:49:28 | 000,001,588 | ---- | C] () -- C:\Windows\TVEpaDrv.ini[2008/03/25 15:56:08 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1461.dll[2008/03/01 14:13:44 | 000,000,577 | ---- | C] () -- C:\Windows\eReg.dat[2007/08/24 19:46:48 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1322.dll[2007/06/29 17:28:24 | 000,086,870 | ---- | C] () -- C:\Windows\System32\BerlitzSCR.dat[2007/05/29 18:15:28 | 000,003,584 | ---- | C] () -- C:\Users\anne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2007/05/14 18:42:35 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat[2007/05/14 18:42:35 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat[2007/05/14 18:42:35 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat[2007/05/14 18:42:35 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat[2007/05/14 18:42:35 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat[2007/05/14 18:42:35 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat[2007/05/14 18:42:35 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat[2007/05/14 18:42:35 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat[2007/05/14 18:42:35 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat[2007/05/14 18:42:35 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat[2007/05/14 18:42:35 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat[2007/05/14 18:42:35 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat[2007/05/14 18:42:35 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat[2007/05/14 18:42:35 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat[2007/05/14 18:42:35 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat[2007/05/14 18:42:35 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat[2007/05/14 18:42:35 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat[2007/05/14 18:42:35 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat[2007/05/14 18:42:35 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini[2007/05/14 15:36:41 | 000,103,489 | ---- | C] () -- C:\Windows\hpqins13.dat.temp[2007/05/14 15:24:32 | 000,103,084 | ---- | C] () -- C:\Windows\hpqins13.dat[2007/05/14 15:17:50 | 000,000,270 | ---- | C] () -- C:\Users\anne\AppData\Roaming\wklnhst.dat[2007/05/14 15:03:28 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat[2007/03/06 10:49:42 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1227.dll[2006/12/17 07:25:34 | 000,049,152 | ---- | C] () -- C:\Windows\System32\ChCfg.exe[2006/12/17 07:21:34 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom24.dll[2006/12/17 07:21:34 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes24.dll[2006/12/17 07:12:06 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1114.dll[2006/11/09 14:19:08 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini[2006/11/02 12:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat[2006/11/02 12:47:37 | 000,385,440 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT[2006/11/02 12:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll[2006/11/02 10:33:01 | 000,622,906 | ---- | C] () -- C:\Windows\System32\perfh009.dat[2006/11/02 10:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat[2006/11/02 10:33:01 | 000,108,122 | ---- | C] () -- C:\Windows\System32\perfc009.dat[2006/11/02 10:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat[2006/11/02 10:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat[2006/11/02 08:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin[2006/11/02 08:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT[2006/11/02 07:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini[2006/11/02 07:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat[2006/11/02 07:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin[2006/11/02 07:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin[2006/08/11 07:00:40 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll[2006/08/11 07:00:40 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll[2006/06/23 18:09:34 | 000,019,968 | R--- | C] () -- C:\Windows\System32\cpuinf32.dll[2005/07/12 13:44:42 | 000,015,872 | ---- | C] () -- C:\Windows\System32\InsDrvZD64.DLL[2004/03/23 15:38:00 | 000,028,672 | ---- | C] () -- C:\Windows\System32\InsDrvZD.dll[2003/03/14 11:24:00 | 000,024,576 | ---- | C] () -- C:\Windows\System32\ZyDelReg.exe========== LOP Check ==========[2007/06/29 17:38:04 | 000,000,000 | ---D | M] -- C:\Users\anne\AppData\Roaming\Berlitz[2007/05/14 15:17:51 | 000,000,000 | ---D | M] -- C:\Users\anne\AppData\Roaming\Template[2007/05/14 18:30:22 | 000,000,000 | ---D | M] -- C:\Users\anne\AppData\Roaming\WinBatch[2011/02/28 22:55:31 | 000,032,612 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT[2011/03/01 20:05:00 | 000,000,416 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{2D168A37-ACDE-4C24-A460-22DBD8BDF236}.job[2011/03/01 20:05:00 | 000,000,416 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{B3AD529D-B780-46F2-AE29-16336EA94E20}.job========== Purity Check ==================== Custom Scans ==========< %SYSTEMDRIVE%\*.* >[2006/09/18 21:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat[2006/11/02 09:53:57 | 000,438,840 | RHS- | M] () -- C:\bootmgr[2006/12/17 07:11:45 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK[2006/09/18 21:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys[2008/07/25 16:13:02 | 000,000,353 | -H-- | M] () -- C:\IPH.PH[2009/12/27 20:11:43 | 000,001,008 | ---- | M] () -- C:\iPod_log.txt[2011/03/01 19:49:40 | 2452,291,584 | -HS- | M] () -- C:\pagefile.sys[2006/12/17 07:25:36 | 000,000,402 | ---- | M] () -- C:\RHDSetup.log[2007/10/28 10:45:25 | 000,000,062 | ---- | M] () -- C:\STRCDC.ini< %systemroot%\*. /mp /s >< %systemroot%\system32\*.dll /lockedfiles >[2009/07/18 12:09:19 | 000,347,136 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll[2009/07/18 12:09:21 | 000,214,528 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll< %systemroot%\Tasks\*.job /lockedfiles >< %systemroot%\System32\config\*.sav >[2006/11/02 10:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV[2006/11/02 10:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV[2006/11/02 10:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV[2006/11/02 10:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV[2006/11/02 10:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV< %systemroot%\system32\drivers\*.sys /90 >[2010/12/20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys[2010/12/20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys========== Alternate Data Streams ==========@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:A8ADE5D8@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:DFC5A2B2< End of report >OTL Extras logfile created on: 01/03/2011 19:59:34 - Run 1OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\Fetherston\DownloadsWindows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstationInternet Explorer (Version = 7.0.6000.16890)Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 46.00% Memory free4.00 Gb Paging File | 3.00 Gb Available in Paging File | 73.00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data]%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program FilesDrive C: | 227.92 Gb Total Space | 18.35 Gb Free Space | 8.05% Space Free | Partition Type: NTFSDrive D: | 4.97 Gb Total Space | 0.59 Gb Free Space | 11.88% Space Free | Partition Type: NTFSComputer Name: ANNE-PC | User Name: anne | Logged in as Administrator.Boot Mode: Normal | Scan Mode: Current userCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days========== Extra Registry (All) ==================== File Associations ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation).cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation).hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation).hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation).html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation).inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation).ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation).url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l.js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation).jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation).reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation).txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation).vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation).vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation).wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation).wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>].html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)========== Shell Spawning ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)batfile [open] -- "%1" %*batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)cmdfile [open] -- "%1" %*cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)comfile [open] -- "%1" %*cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)exefile [open] -- "%1" %*helpfile [open] -- Reg Error: Key error.hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)htafile [open] -- C:\Windows\system32\mshta.exe "%1" %* (Microsoft Corporation)htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %lInternetShortcut [print] -- rundll32.exe C:\Windows\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)jsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)jsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)jsefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)jsefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)jsefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)piffile [open] -- "%1" %*regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)regfile [open] -- regedit.exe "%1" (Microsoft Corporation)regfile [merge] -- Reg Error: Key error.regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %lscrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~3\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)========== Security Center Settings ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"cval" = 1"UacDisableNotify" = 1"InternetSettingsDisableNotify" = 1"AutoUpdateDisableNotify" = 1[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]"DisableMonitoring" = 1[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]"DisableMonitoring" = 1[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]"DisableMonitoring" = 1[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]"AntiVirusOverride" = 0"AntiSpywareOverride" = 0"FirewallOverride" = 0========== Firewall Settings ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"DisableNotifications" = 0"EnableFirewall" = 0[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"DisableNotifications" = 0"EnableFirewall" = 0[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]"DisableNotifications" = 0"EnableFirewall" = 0========== Authorized Applications List ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent========== Vista Active Open Ports Exception List ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{4AB55A34-8198-479D-9A79-F495FDF2F821}" = lport=2869 | protocol=6 | dir=in | app=system | "{5CC475F7-DD9C-4018-9110-440981882D16}" = lport=1900 | protocol=17 | dir=in | name=intel® viiv media server upnp discovery | "{7DB5A334-5C80-4FCF-AC81-33C5E16C1B37}" = lport=9442 | protocol=17 | dir=in | name=intel® viiv media server discovery | "{8E2114EF-7116-43D8-911B-CF66F5E14514}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | ========== Vista Active Application Exception List ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{01605CD7-232C-4178-8245-4CB62E7A8D5E}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | "{0850D15E-28D2-4FF8-813D-6DEB952031C8}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{0E9F43DD-7888-4026-A4BE-BBD27C3C5C37}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{20E1D4A4-6302-4F30-A40A-ECA4CCEC4EC2}" = protocol=17 | dir=in | app=c:\program files\intel\inteldh\intel media server\shells\remote ui service.exe | "{2457EC2C-90CD-4998-B1B1-7EB9FFC80C79}" = protocol=17 | dir=in | app=c:\program files\bittorrent\bittorrent.exe | "{33057D19-5B01-4ABF-87AB-ECBFC5CE18FB}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe | "{39CD1083-F909-45C5-A92C-E656443495AB}" = protocol=17 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe | "{62C297E8-223D-4C9A-9FDB-7B213F69EE07}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe | "{7369D8CF-5472-45BA-93FF-FFEC15896B3A}" = dir=in | app=c:\program files\itunes\itunes.exe | "{7C28DF1A-79EB-4861-B2C6-6EF7ADA8A8F8}" = protocol=6 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\tshwmdtcp.exe | "{855F48E5-D0A2-4D1D-8280-B93B74E9080D}" = protocol=6 | dir=in | app=c:\program files\bittorrent\bittorrent.exe | "{8A73EBEF-640B-4D7C-9E35-4C9E3470FEAF}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{8D77CFFA-17AB-41CC-A4B1-72E1D3A832E6}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | "{8DE15F07-9C91-4393-8FFC-7950FBB8A7E9}" = protocol=17 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\tshwmdtcp.exe | "{93166DA0-9608-4714-BE13-105DDFF51428}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | "{94C6B5B0-917F-4897-A5F1-E2677EC7035F}" = protocol=6 | dir=in | app=c:\program files\aim6\aim6.exe | "{97CC8D06-29F9-4E58-869E-023E44F7975D}" = dir=in | app=c:\windows\system32\lxeacoms.exe | "{98EA2CBF-F1E8-4902-ADCA-3AB30A6DF67E}" = protocol=6 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\mediaserver.exe | "{9E499003-17E3-406F-A940-020036D0DA1C}" = protocol=6 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe | "{BB243B7D-D626-4446-8091-31EE4E5CD0E8}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe | "{BCE9447F-8C6E-4AE1-9867-DCEEB70BB338}" = dir=in | app=c:\windows\system32\lxeacoms.exe | "{C9AE8892-205D-4698-A60A-AD7C0EAE5739}" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe | "{CF911832-9F54-4EA2-AA0A-C8562B2BF9A6}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{D09AE87F-C610-457E-9787-B11BB94BBCC7}" = dir=in | app=c:\windows\system32\lxeacoms.exe | "{E47BD717-793B-40FE-A2F4-5C0FF99A56CB}" = protocol=17 | dir=in | app=c:\program files\aim6\aim6.exe | "{F0FED152-4803-4559-B8C3-C9A7A05A8C65}" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe | "{FC945A2A-3580-4552-8D5B-3EC84E906D8F}" = protocol=6 | dir=in | app=c:\program files\intel\inteldh\intel media server\shells\remote ui service.exe | "{FF4DF79F-DAC1-4FBE-AA31-82072A342D3B}" = protocol=17 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\mediaserver.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{00CB213D-CA43-4CB7-A9ED-808E1D0E4739}" = Video Capture USB"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools"{0CFD3BAF-9F4D-4D70-BD0B-638EA2504C25}" = PSSWCORE"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data"{1017A80C-6F09-4548-A84D-EDD6AC9525F0}" = Lexmark Toolbar"{10812DE7-2E57-4740-B226-6B3BE34AF9D7}" = Lexmark Tools for Office"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer"{1BD07DF4-FB06-41BA-B896-B2DA59000C96}" = Windows Live Toolbar"{1D53B6F9-E66E-42D8-A221-4FF8AC134FD7}" = Roxio Activation Module"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool"{21ABEA96-CCAB-4C40-8699-6BDFEC5FD63C}" = Roxio Easy VHS to DVD Content"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java 6 Update 11"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java 6 Update 3"{3383136B-4F86-4F05-8612-DD4BB16A1EAE}" = Roxio Easy VHS to DVD"{3672B097-EA69-4bfe-B92F-29AE6D9D2B34}" = Norton Internet Security"{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}" = ccCommon"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend"{4126B624-D1D3-465C-9EEC-E9E7F7318439}" = Berlitz Learning System - Spanish"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials"{48185814-A224-447A-81DA-71BD20580E1B}" = Norton Internet Security"{4843B611-8FCB-4428-8C23-31D0A5EAE164}" = Norton Confidential Browser Component"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack"{51F96AEC-D902-4434-A0DC-B9692A21AE7C}" = MobileMe Control Panel"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3"{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}" = Norton Internet Security"{5BF5F9C5-E95B-4AFA-94BE-F2A9CA73B61D}" = Apple Mobile Device Support"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works"{6E7BF6EC-C3E7-43A7-8A03-0D204E3EC01B}" = Intel Link to post Share on other sites More sharing options...
Staff screen317 Posted March 25, 2011 Staff ID:404711 Share Posted March 25, 2011 ninael,We apologize for the extended delay. Do you still need help? Link to post Share on other sites More sharing options...
Staff screen317 Posted April 27, 2011 Staff ID:421888 Share Posted April 27, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts